last executing test programs:

4m9.451108111s ago: executing program 2 (id=53):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x10, &(0x7f0000000000)={[{@errors_continue}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@jqfmt_vfsold}]}, 0x1, 0x3e1, &(0x7f0000000cc0)="$eJzs3M1uG0UcAPD/bhKnST8cJA6ocIgEgiAgrgMBipAoXPm4AA9gJWmpcJuqMRItOQTEiRMHxI1DX4ADD1BVCAmJV+AFUKUKpTnALWjtXceN4zRW7Jimv5808szuODN/r72a2exOAI+t2Yi4EBFjEbEQEeV8e5qn2GilrN79zfWlrc31pSS2tz/+O4kk31b8rSR/PZkX5tKI9NuIpze62127cfPzWr2+cj0vVxpXrlXWbtx85fKV2qWVSytXq2+cr1YXF96svjawWH987sXzY+9dOPvTn+U7i6XSVNbfU/m+zjgGZTZm25/JbouDbmzESqPuAAAAB5LmY//x5vi/HGPNXEs5Kusj7RwAAAAwENvv5K+5UkceAAAAOC4S830AAAA45or7AO5vri8VaYS3Ixy5e+9GxMzOs81b7fjH40ReZ2KIz7fORsS155NylmJIzyEDAHS6k41/zu01/kvjqY56kxHN8dDUgNuf3VXuHv+kdwfc5AOy8d/bEbHVNf5LiyozY3npdHOoOJFcvFxfORcRZyJiLiYms3J1nzbe/+fnj3rty+L/LTl9pkhZ+9nrTo307vjkg+9ZrjVqh4m5072vI86O7xV/0h7/JhExfYg2xr669VavfQ+Pf7i2b0W8sOfx31m5J9l/faJK8/tQKb4V3f795pcPe7U/6viz4z+9f/wzSed6TWv9t3H7sz+e6bWvc/7Tz/e/lHzSzBfzsi9rjcb1akQp+aB7+8LOe4tyUT+Lf+7ZvX//xfkvyde0OpWfA/r13fe/vnyQ+LOUtV/MBY9CFv9yX8e//8zrt3//tFf7D48/O/6tNcDm8i0HOf8dpF+H+dwAAADgUZI2r2sk6Xw7fyLm51vXO56M6bS+utZ46eLqF1eXW9c/ZmIiLa50lTuuh1Zb/0Zvlxd2lV+NiCci4ofyVLM8v7RaXx518AAAAPCYONk1/0/TbP6f+evI7kIAAAAAhm5m1B0AAAAAhs78HwAAAI61w6zrJyNzjDLJRusn8X/pz4gzoz4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNr+CwAA//8gi63D")
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8810)
writev(r1, &(0x7f00000000c0), 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000006a00010628bd7000fedbdf250a0000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r3, &(0x7f0000000000)='3', 0x1, 0x4fed0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]})
sendfile(r4, r4, 0x0, 0xe3aa6e6)

4m7.354479972s ago: executing program 2 (id=57):
sigaltstack(&(0x7f0000000500)={&(0x7f0000000380)=""/75, 0x80000002, 0x4b}, 0x0)
r0 = socket(0x2a, 0x80801, 0x1)
r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/71, 0x47}], 0x1, 0x5, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x50)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r8}, 0x38)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c)
recvmsg$inet_nvme(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x1)

4m4.000614245s ago: executing program 2 (id=65):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x5, 0xb}, 0x11efe1, 0x1224, 0x0, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x200000101ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x42000)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0xc8)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

4m3.3575071s ago: executing program 2 (id=70):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
io_uring_setup(0x14cf, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setpriority(0x0, 0x0, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00'})
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a00", @ANYRESHEX=0x0], 0x24}}, 0x44004044)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

4m2.391461764s ago: executing program 2 (id=74):
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x42000)
flistxattr(r0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0xc8)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4c24, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0x8000009}, 0x1c)

4m0.367652913s ago: executing program 2 (id=83):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
setresuid(0xee01, r1, r1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000680)=""/117, 0x75}], 0x4, &(0x7f0000000a00)=""/242, 0xf2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000380)=0x3)
ioctl$TIOCSLCKTRMIOS(r10, 0x5457, &(0x7f00000000c0))

4m0.367404753s ago: executing program 32 (id=83):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x6000)
setresuid(0xee01, r1, r1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000680)=""/117, 0x75}], 0x4, &(0x7f0000000a00)=""/242, 0xf2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000380)=0x3)
ioctl$TIOCSLCKTRMIOS(r10, 0x5457, &(0x7f00000000c0))

3m0.920106526s ago: executing program 5 (id=388):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399})
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

3m0.650797233s ago: executing program 5 (id=393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
r8 = timerfd_create(0x7, 0x800)
r9 = getpid()
r10 = syz_pidfd_open(r9, 0x0)
open_by_handle_at(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="0c000000fe000000030078"], 0x0)
timerfd_gettime(r8, &(0x7f0000000140))
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\t\x00\x00\t', @ANYRES16=r11, @ANYBLOB="000129bd7000fcdbdf250a0000000800020003000000040006800800020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
dup3(r12, r5, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[], 0x0)
close(r4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0)

3m0.488363717s ago: executing program 5 (id=396):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x10, &(0x7f0000000000)={[{@errors_continue}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@errors_remount}]}, 0x1, 0x3e1, &(0x7f0000000cc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a010400000000000000000300000a0900010073797a3000000000080002400000000614"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r6], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0)
epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r8, &(0x7f0000000000)='3', 0x1, 0x4fed0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101)
sendfile(r9, r9, 0x0, 0xe3aa6ea)

2m59.571017259s ago: executing program 5 (id=402):
r0 = socket$netlink(0x10, 0x3, 0xb)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20008100}, 0x4800)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xe}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xb09}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x7ff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async)
mknod$loop(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x0) (async)
set_mempolicy(0x1, &(0x7f00000000c0)=0x100, 0x8000000000000000) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
ptrace$poke(0x5, r5, &(0x7f0000000200), 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)

2m59.034997832s ago: executing program 5 (id=409):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00080000020000000000000000080200"}}}]}, 0x48}}, 0x0)

2m58.741556929s ago: executing program 5 (id=412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf00, 0x2}, 0x50)

2m58.636388612s ago: executing program 33 (id=412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf00, 0x2}, 0x50)

2m44.441707429s ago: executing program 4 (id=488):
ioprio_set$pid(0x2, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000009c0)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000440)={[{@nodioread_nolock}, {@delalloc}, {@nojournal_checksum}, {@errors_remount}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==")
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int={0x20000000}]}}, 0x0, 0x4e}, 0x20)

2m44.302431602s ago: executing program 4 (id=493):
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000100)={[{@dioread_lock}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x539, &(0x7f0000000d00)="$eJzs3UFsI1cZAOB/HHt3s5s2KXCASpRCi7IrWDtpaBv1UIqE4FQJKPclJE4UxYmj2Gk3UQVZceCIhBAgcSoXLkicOCGhSlw4IqRKcAYBAiHYwgEJ6FS2x9ldZ5xkGydO4++TJvPe8/P737M1k3nj0UwAI+vJiHgpIt5J0/RGRExm5YVsib3O0qr39t3XF1tLEmn6yj+SSLKybltp2+W4lr3tSkR85YsRX08Oxm3s7K4t1GrVrSxfaa5vVho7uzdX1xdWqivVjbm52efmn59/dn5mIOOciIgXP/+X73/nJ1948Zeffu2Pt/52/RtJVh4943hIxcNe7Ay91P4s7n/D1nsMdh4V2yPMjOfVGOvJj8edU+8VAAD9fCAiPhERN2Iyxg4/nAUAAADeh9LPTsT/ku5vdwdc6lMOAAAAvI8U2tfAJoVydr3vRBQK5XK0r+H9UFwt1OqN5qeW69sbS51rZaeiVFherVVnsmuFp6KUtPKz7fS9/DM9+bmIeCwivjc53s6XF+u1pWGf/AAAAIARca1n/v/vyc78HwAAALhgpobdAQAAAODUmf8DAADAxWf+DwAAABfal15+ubWk3edfL726s71Wf/XmUrWxVl7fXiwv1rc2yyv1+kr7nn3rR7VXq9c3PxMb27crzWqjWWns7N5ar29vNG+tPvAIbAAAAOAMPfaxN3+fRMTeC+PtpeXS8d56zGrAeVXcTyXZOmez/sOjnfWfz6hTwJkYG3YHgKEpDrsDwNCUht0BYOiSI17ve/HOb7L1xwfbHwAAYPCmP5L/+//R5wX3CmfQPeAU+f0PRpftH0ZX+zj/uFfyOuKHC6XkCABG3ol//z9Smj5UhwAAgIGbaC9JoZyd3puIQqFcjnik/ViAUrK8WqvORMSjEfG7ydLlVn62/c7kyDkDAAAAAAAAAAAAAAAAAAAAAAAAANCRpkmkAAAAwIUWUfhr8qvOvfynJ5+e6D0/cCn5z2Rkjwh97Uev/OD2QrO5Ndsq/+d+efOHWfkzwziDAQAAACOh+DCVu/P07jweAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp7buvL3aXs4z7989FxFQUs+x98Ytxpb2+EqWIuPqvZL9SSxIRYwOIP9768+G88ScxFfdC5sUff+Pk8ffuHBo/prJPIS/+tZOHh5H2Zmv/81Le9leIJ9vr/O2vGPFA/r3K9n+5+9/u/m+sz/b/yDFjPP7Wzyp949+JeLyYv//pxk/6xH8qr8Gff/tA0de+urvbL376RsR07v+f5IFYleb6ZqWxs3tzdX1hpbpS3Zibm31u/vn5Z+dnKsurtWr2NzfGdz/6i3cOG//VPvGnjhj/0zntXcop+/9bt+9+sJMs5cW//lRO/F//OKtxMH4h+9/3ySzden26m97rpO/3xE9/+8Rh41/qM/6jvv/r/RrtcePL3/rTMasCAGegsbO7tlCrVbfOR+KFGHjLrRn+0Md1MDGefQHnpT+9if+mx698JRvLoLtx+bS/uG8OtME0TdPWx3CCdpKBf4aHxTq0q8PbJwEAAKfj3kH/sHsCAAAAAAAAAAAAAAAAAAAAo+ss7jTWG3NvP5UM4hbaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8W4AAAD///aM00I=")

2m44.149687136s ago: executing program 4 (id=499):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
semget(0x1, 0x1, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000002ac0)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x2}, 0x3}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000300)="09daaea52765c29e92106f2c42f0bf10be573da212055b8d9a4f0a14405739ad22293d6083d1bbefe5f5de3a51a2d3a8031510d3d2fb7ec4fabf3bfba34be387d4e46d19", 0x44}, {&(0x7f0000000380)="781646874e31e22f41e1aa9dc224a45b769eda874e50b363605fc5fc5abc96a19ffff766772ec1", 0x27}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="1da061358f6ab9bd9fbd01354b540134efc7de38cdf7fea25a7b957c733565c07ccc1c9fa27b396bc35d169a20d5bc5be19b9f9a2d0f8b5fa9e44f5382d19c358272f167b0a7712ed60d11dc79fd76bdb283c197f3d8fbb731e2c9d9eeb949ad72c684c852bf8be996a963d6a36d923687f763960d435c8cec7b4f0af8836e0e6881c3efd7f0b82b904bfea4a5a9ae25d70578961e43532d4baeeea98d9ed0abb80c14adf076", 0xa6}, {&(0x7f00000025c0)="38458bd033bec3a9c942b5a3fefb10076abfa6d562fff48bd3399bbbe03d03b8adde1d7319dd0c1a94e178d90de94b0df264fc2ca17fa1b509e4bd6e42d0ea5125e95d3ca8987899b9f3cb60889901761de3e38ea1b2a72c12b0296558ab1ae3164a84a8343058442d4969cfdc1029e46536a0", 0x73}, {&(0x7f0000002640)="e92003f009d4442ad2d7d3f57257ebd33905fb21e380e9c6124235647a22cbf7b4823c2fb93d86cab3cb0fb35464569998bb705cf5b7d16cdfa933921c019e736e13c5054d495403c103102e9911f96ed5e701dd6eded64d20f704bda9a3222bc444d2f1717197699a8cf16a5f7289a834dc2df4cfd1567099e711bbbad379b8357173f8eef514b836bbc194e094331026bdedee498efd127b00344962821003365d29f7c4679829e2df903b81a1cdf71c5e4efca79e7abd", 0xb8}, {&(0x7f0000002700)="28ff14b7b878a2f39984c4897e23e7eb958f3aa796ec779c7a543bd0fbab5166be2f85015ae1c27aeb81eca5ff721059f6a07e041043fafefaacef45c41dfceafb0b5d0d5cdff3adc324721d0b4451385a08b4d44cc8267c96580bc3b3953b12d495f891163ca8ee13f794b354fcf01967a6fe458349edf8367a38d9617dec2f40128cbafdb7", 0x86}, {&(0x7f00000027c0)="ec5f718f0b9dab69de7002d26335f1fed24547f75d3c998ca1ce76b9eaa204a17fea1741107d0e9fdd7f5f7d0c5fe36c1f81fdf6137edc45ed310ebe2ba7ce94a477428446a6f8ed35b74a376ab8330aebc7f0cce919859a839adee183ed41b540091ae6a924630aedcf14478b2dc0bf0408c325155d2e9a340510db5f9e213ed49857a54ef64d2bcea9c2dc8f7e1a89b7c718b6cad2d595232e0a524ff98c4a6bcb7b926fe3", 0xa6}, {&(0x7f0000002880)="6243c404aa04308f80e8b607ddd0ffcc037ef99b173399b68c2d497dcbda086e243a197674d4259c315c681936b53486a9347501d10b39059bdbae05ba2570113e900aaff69cba74802db5cb19d3fdf647b0edaf5c9d219bd2e3f3449337b4e947bd1241e5828675c86f9b7471d34bf53c29ecf36726fbd3176f1ace31310be38ca1b0bfe6c4e72169b02a8445e2", 0x8e}], 0x9, &(0x7f0000002a00)=[{0xc0, 0x10e, 0x8, "c2233131a944cba7799b04c34c76e3222e7a3915eed32bb94b2fbd805340cab1d0f9471eac7c08b4c884cbb09417563addaee10dad0ffad88b5d1f31319b715db107c88e0dbdad45b78d92f10f2a08f08c5fb107ff4861f84e0276097fcb7f4e728b67b52a563f30103ce7d6d968def692a32df8749f667a212ea2c99728a9ca95971951a199fa9a57ea14db37304ad79804f4da1c26dcb3bc690d59e926af7f5005cb456f2e3f20ed9e4c6075d59687"}], 0xc0}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010025bd7000dfdbdf25000000006e0012d87a33781ad4f8b1c24dfaa03b7885e4d5aa853393d7632f07b1286c022a10ca718aa0262a34c799958a76", @ANYRES32=0x0, @ANYBLOB="4db20200307a01000500100002000000140003006e657464657673696d30000000000000040014000a0001007a2f9711ec2b000008001f0002"], 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x20048010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r2], 0x60}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m43.267705258s ago: executing program 4 (id=503):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x1, 0x4000000000000, 0xffdfffffffbffffe, 0x7f, 0x401}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61)
stat(0x0, &(0x7f00000001c0))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x802d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
ptrace$getsig(0x4202, r3, 0xfffffffffffffffd, &(0x7f0000000300))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r4, r4, 0x0, 0xfffe80)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x1, 0x4000000000000, 0xffdfffffffbffffe, 0x7f, 0x401}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) (async)
stat(0x0, &(0x7f00000001c0)) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r3) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x802d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) (async)
ptrace$getsig(0x4202, r3, 0xfffffffffffffffd, &(0x7f0000000300)) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) (async)
sendfile(r4, r4, 0x0, 0xfffe80) (async)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async)

2m42.942774826s ago: executing program 4 (id=506):
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x42000)
flistxattr(r0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0xc8)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

2m42.458434007s ago: executing program 4 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setrlimit(0xe, &(0x7f0000000100)={0x401, 0x8000000000000000})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_open_dev$evdev(0x0, 0x3, 0x181080)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @random="e69398e0afcd"})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000280)=0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)

2m42.416032678s ago: executing program 34 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setrlimit(0xe, &(0x7f0000000100)={0x401, 0x8000000000000000})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_open_dev$evdev(0x0, 0x3, 0x181080)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @random="e69398e0afcd"})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000280)=0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)

1m44.377215808s ago: executing program 6 (id=878):
socket(0x15, 0x80005, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0)

1m44.376325128s ago: executing program 6 (id=879):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)

1m44.258467801s ago: executing program 6 (id=880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x3000000, 0x0, 0xc0}, 0x20044004)

1m44.138597354s ago: executing program 6 (id=882):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x2, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392b, 0x11, r0, 0x100000000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={<r4=>r3})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000180100002020702500000000002020207b1af8ff00008dd1f3ca00000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950063c75ec717c9fe2565c30a7263deecb08fa206caf1c8a61e1e8c1877d84f506ba6e2c4e0e922680aec3a1dbf6186f3861c2286686013ef8663aaf94c3b37e328dcb275a2c6e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$kcm(r3, 0x0, 0x8040)
r6 = dup(r4)
mknodat(r6, 0x0, 0x11c0, 0xffffffff)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, 0x0, 0x8880)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=")
r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, 0x0, 0x4)
write$binfmt_register(r8, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x42428, 0x0)
connect$inet(r7, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r5})

1m43.07947447s ago: executing program 6 (id=887):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1m42.772054608s ago: executing program 6 (id=889):
socket(0x15, 0x80005, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0)

1m42.748362588s ago: executing program 35 (id=889):
socket(0x15, 0x80005, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x0)

1m19.777481989s ago: executing program 7 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = msgget$private(0x0, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x1a, 0x200a}, 0x20)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
msgctl$IPC_RMID(r1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x4000040, 0x80000001, 0x1000000}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600016c29bd7000800001000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0) (async)
msgget$private(0x0, 0x8) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x1a, 0x200a}, 0x20) (async)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async)
msgctl$IPC_RMID(r1, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x4000040, 0x80000001, 0x1000000}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001600016c29bd7000800001000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)

1m19.218066453s ago: executing program 7 (id=999):
set_mempolicy(0x4005, 0x0, 0x6)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12270d4, &(0x7f00000008c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '802.15.4 MAC\x00\xb8\x10\xb1\x98\xc8\x89\xbd?$\x02h\xfb\xea\xbf\xfe\xd8\xcb}\nPc\xe2\x0e\x9a\xd5\xfa\xb9 \xdc:\xae\xf7\xa2T\x1fF\xf8U\xb6\xecC\x10\x01\xdc\xa5g\xc6vk\x99\xba\xe4\xf6\xe4{L\xaf\x1e\xe2\xda\xbf\x11\f\x12\xf7\x9a\x8d\xe15SBK6\xb4\xdc'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}]}, 0x1, 0x592, &(0x7f00000014c0)="$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")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0)
syz_clone3(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x5, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x830d}, 0x180, 0x2, 0xfffffffe, 0x7, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x103482)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x6, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
fchown(0xffffffffffffffff, 0xee00, 0xee01)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e1e, @local}, 0x10)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "11a07159e472607184536cd41d7f9599faa1ba0c72486384dc4c0c3627a20f0baf"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

1m17.988014613s ago: executing program 7 (id=1005):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x21c6, &(0x7f0000000580)={0x0, 0xfffffffa, 0x80000, 0xfffffffe, 0x165}, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

1m17.930979014s ago: executing program 7 (id=1006):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x100fbff}])
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES32=r5], 0x6}}, 0x4000480)

1m16.89223526s ago: executing program 7 (id=1015):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x5, 0xb}, 0x11efe1, 0x1224, 0x0, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x200000101ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x42000)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet6(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp6(0xa, 0x3, 0x2)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0xc8)
r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

1m16.664887116s ago: executing program 7 (id=1020):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff})
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109023b009418000002090400fa0002060007052406000005"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @private1, 0xc4ca}, 0xffffffffffffffe1)
sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x25, &(0x7f00000001c0)=0x1002000b, 0x4)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x10, 0xad, 0x5, 0x0, 0x0, 0xa, 0x328, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0xcc3b864078103e35, 0x0, 0xd735, 0x2, 0x800000005, 0x6, 0x0, 0x0, 0x9, 0x0, 0x5000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x2, 0x7, 0x1, 0x0, 0x1, 0x508, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x104040, 0x4, 0x9, 0x4, 0x1, 0x5e6, 0xfffd, 0x0, 0x2, 0x0, 0x4}, r1, 0x8, r4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0xffffffffffffff92)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x23, 0x2, 0xd)
r7 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltclass={0x84, 0x29, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffff}}, [@tclass_kind_options=@c_htb={{0x8}, {0x18, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xf2}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x77, 0x40}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x7b, 0x5}}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r8, 0x89e6, &(0x7f0000000500)="d1e8267a3814476ef91eb7cfb997cd7447d95a5d079bb8241c4c4420b5f13e976dc8c7aeb049268f4225a1aa9c2876c8e56f92c1a405974e54c837ddcacb5db37bb133030fda17be12c520e3c75419b6e72b4e186e9cb7281a09f3ebe0c18b48b1df9c8de2f5454fe1a56cdd847460a639ec9987cca8fe4a4c8d62ef6a7d51a1a5c329010844fe935698d5c31521404b66ab54b415bf93d12c78b0114dc21e89d26cc9f551d89177b750")
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @empty}})
mprotect(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x100000a)
r9 = socket$packet(0x11, 0x0, 0x300)
unshare(0x20400)
recvmmsg(r9, 0x0, 0x0, 0x2060, &(0x7f0000000040)={0x77359400})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
move_pages(0x0, 0x2000000000000027, &(0x7f00000003c0)=[&(0x7f00001f1000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0xc)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000006c0), 0x1)
flistxattr(r5, &(0x7f0000000200)=""/161, 0xa1)

1m16.653854826s ago: executing program 36 (id=1020):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff})
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109023b009418000002090400fa0002060007052406000005"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @private1, 0xc4ca}, 0xffffffffffffffe1)
sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x25, &(0x7f00000001c0)=0x1002000b, 0x4)
r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x10, 0xad, 0x5, 0x0, 0x0, 0xa, 0x328, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0xcc3b864078103e35, 0x0, 0xd735, 0x2, 0x800000005, 0x6, 0x0, 0x0, 0x9, 0x0, 0x5000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9, 0x2, 0x7, 0x1, 0x0, 0x1, 0x508, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x104040, 0x4, 0x9, 0x4, 0x1, 0x5e6, 0xfffd, 0x0, 0x2, 0x0, 0x4}, r1, 0x8, r4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0xffffffffffffff92)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x23, 0x2, 0xd)
r7 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@deltclass={0x84, 0x29, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffff}}, [@tclass_kind_options=@c_htb={{0x8}, {0x18, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xf2}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x77, 0x40}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x7b, 0x5}}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r8, 0x89e6, &(0x7f0000000500)="d1e8267a3814476ef91eb7cfb997cd7447d95a5d079bb8241c4c4420b5f13e976dc8c7aeb049268f4225a1aa9c2876c8e56f92c1a405974e54c837ddcacb5db37bb133030fda17be12c520e3c75419b6e72b4e186e9cb7281a09f3ebe0c18b48b1df9c8de2f5454fe1a56cdd847460a639ec9987cca8fe4a4c8d62ef6a7d51a1a5c329010844fe935698d5c31521404b66ab54b415bf93d12c78b0114dc21e89d26cc9f551d89177b750")
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @empty}})
mprotect(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x100000a)
r9 = socket$packet(0x11, 0x0, 0x300)
unshare(0x20400)
recvmmsg(r9, 0x0, 0x0, 0x2060, &(0x7f0000000040)={0x77359400})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
move_pages(0x0, 0x2000000000000027, &(0x7f00000003c0)=[&(0x7f00001f1000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0xc)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000006c0), 0x1)
flistxattr(r5, &(0x7f0000000200)=""/161, 0xa1)

16.196863114s ago: executing program 0 (id=1389):
r0 = syz_open_dev$usbfs(0x0, 0xffffffffffffffff, 0x1781)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0xffff}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb)
splice(r2, 0x0, r3, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)

11.681998544s ago: executing program 0 (id=1405):
socket$kcm(0x2, 0x922000000001, 0x106) (async)
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r1=>0x0)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, 0x0, 0x4001) (async)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, 0x0, 0x4001)
getpid() (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000ae8000000180a010100000000000000000000000008000740000000020900010073797a30000000000900020073797a32000000000c00054000000000000000029c000380080002400000384690000380140001006970766c616e30000000000000000000140001006e696376663000000000000000000000140001006970766c616e31000000000000000000140001007465616d5f736c6176655f3000000000140001006d6163766c616e3000000000000000001400010073797a6b616c6c657231000000000000140001006970365f7674693000000000000000000900010073797a31000000001c0000000e0a010100000000000000000700000508000440ffffffff140000001100010000000000000000000300000a288de432f13e4c9a3c75ea267d00db31d2ae71d8551753711d167e24bfcd4fd881e2f7a9bb6f36"], 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x98911f774d8f3ebe) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000ae8000000180a010100000000000000000000000008000740000000020900010073797a30000000000900020073797a32000000000c00054000000000000000029c000380080002400000384690000380140001006970766c616e30000000000000000000140001006e696376663000000000000000000000140001006970766c616e31000000000000000000140001007465616d5f736c6176655f3000000000140001006d6163766c616e3000000000000000001400010073797a6b616c6c657231000000000000140001006970365f7674693000000000000000000900010073797a31000000001c0000000e0a010100000000000000000700000508000440ffffffff140000001100010000000000000000000300000a288de432f13e4c9a3c75ea267d00db31d2ae71d8551753711d167e24bfcd4fd881e2f7a9bb6f36"], 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x98911f774d8f3ebe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
pipe2$9p(&(0x7f0000000240), 0x4000)
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r6 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f00002a6000/0x3000)=nil, &(0x7f0000289000/0x4000)=nil, &(0x7f00007ca000/0x2000)=nil, &(0x7f00009f3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000023f000/0x4000)=nil, &(0x7f0000698000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000753000/0x2000)=nil, &(0x7f00004fd000/0x4000)=nil, &(0x7f0000000300)="99793c552b5c36370489eaf7aa34035457ee3e003215c1fd76ec3fd7ae70a983ebeec3128099d96841237dac986506bc47c305e0", 0x34, r6}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f00002a6000/0x3000)=nil, &(0x7f0000289000/0x4000)=nil, &(0x7f00007ca000/0x2000)=nil, &(0x7f00009f3000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000023f000/0x4000)=nil, &(0x7f0000698000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000753000/0x2000)=nil, &(0x7f00004fd000/0x4000)=nil, &(0x7f0000000300)="99793c552b5c36370489eaf7aa34035457ee3e003215c1fd76ec3fd7ae70a983ebeec3128099d96841237dac986506bc47c305e0", 0x34, r6}, 0x68)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
setpgid(r2, r2) (async)
setpgid(r2, r2)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r8, 0x2)
move_pages(r2, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000014000200776730000000094d0000000000000000340008a5e914d033d90f30a110803000008024000100"/86], 0x5c}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x24000040)

7.780660949s ago: executing program 9 (id=1420):
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x9, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="000000000000004102", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)

7.636002783s ago: executing program 9 (id=1421):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
lseek(r3, 0xad, 0x1)
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$netlink(r4, 0x0, 0x4000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
dup(0xffffffffffffffff)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x2a020400)
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r6 = open(&(0x7f00000000c0)='./file1\x00', 0x167842, 0x21)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

4.549296368s ago: executing program 9 (id=1435):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000f80)=""/4087, 0xff7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0)
accept$unix(r3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.418229452s ago: executing program 0 (id=1436):
r0 = syz_open_dev$usbfs(0x0, 0xffffffffffffffff, 0x1781)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0xffff}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb)
splice(r2, 0x0, r3, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)

3.743063798s ago: executing program 1 (id=1439):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}, 0x1, 0x0, 0x0, 0xffa6}, 0x0)

3.637634951s ago: executing program 1 (id=1440):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="78000000100001042abd70000000000000000000", @ANYBLOB="2002040004000000200012800b00010065727370616e00001000028004001200060011004e220000140003006e696376663000000000000000000000240012800b000100627269646765"], 0x78}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000370000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000004b00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.550666363s ago: executing program 8 (id=1442):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0xd, 0x6, {0xb, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x45}, {0x0, @empty, 0xfff, 0x5, [0x209, 0xd]}, 0xff, 0x3}}})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = dup(r0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0x0, 0x0, 0x4, 0x8040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @value=r2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x18, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/111, 0x6f)

3.532280093s ago: executing program 8 (id=1443):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x361481)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x23, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @empty, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "2a85d98020f4d7db"}}}}, 0x0)

3.513873584s ago: executing program 1 (id=1444):
r0 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r0, 0x0, 0x0, 0x1, 0x0, 0x1, r0}])

3.464317015s ago: executing program 1 (id=1445):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
lseek(r3, 0xad, 0x1)
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$netlink(r4, 0x0, 0x4000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x2a020400)
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r6 = open(&(0x7f00000000c0)='./file1\x00', 0x167842, 0x21)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

3.463371215s ago: executing program 8 (id=1446):
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_ep_write(0xffffffffffffffff, 0x82, 0x21, &(0x7f00000000c0)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c21")
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00000021000100feffffff00000000000000000002800000000000000000000000edffffffffffff1600a000"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x14)

3.287365379s ago: executing program 3 (id=1447):
io_setup(0x4, &(0x7f00000001c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}])

2.827943341s ago: executing program 9 (id=1448):
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x21c6, &(0x7f0000000580)={0x0, 0xfffffffa, 0x80000, 0xfffffffe, 0x165}, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)

2.535267108s ago: executing program 9 (id=1449):
r0 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x8001, 0x6, 0x7}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$SG_BLKTRACESTOP(r1, 0x1275, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x400, 0xffffffff, 0xf9}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9f4c7000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_disconnect(r3)
r6 = socket$pppoe(0x18, 0x1, 0x0)
readv(r6, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000600)=""/80, 0x50}], 0x5)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c02"])
close_range(r0, 0xffffffffffffffff, 0x0)

2.294655674s ago: executing program 8 (id=1450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setrlimit(0xe, &(0x7f0000000100)={0x401, 0x8000000000000000})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0xb}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_open_dev$evdev(0x0, 0x3, 0x181080)
pipe2(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @random="e69398e0afcd"})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)

2.158973157s ago: executing program 3 (id=1451):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x243, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000068000100ac381000fdff7f000000003d06a341b177fa6d3fcb000000000c000200010000001500000014000c80080001000b0000de6996003166adcf0006000300010000003754ff2e2e84aff42f544ef16c0775b2f97242fa00"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10)
madvise(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x3ba3c8e0e0a19602)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x8, 0x0, 0x0, 0x0, 0x16, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x1, 0x784, 0x6, 0x1ff, 0xcb, 0xa, 0x0, 0x10000, 0x0, 0xbf}, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffdf, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x5, 0x6e, 0x50, &(0x7f00000009c0)="b63799300ef5d0c989baef6ab6d16309420015846cace04d977a9da10e78efed900a396fa28699ca816983bb157dca4c95e0dccbeb8762d1946b545dd052c8426b0c8ffaf96e4d39a938451cf5df5071470136f118a5c9f6181b20416ee91ed6181242a3786a5333c5b6d365cd5a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1d)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000600)=0xfffffffe, 0x4)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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")

1.333513527s ago: executing program 1 (id=1452):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = io_uring_setup(0x1d4c, &(0x7f00000002c0)={0x0, 0x64b13e, 0x80, 0x6, 0x58})
r2 = socket$tipc(0x1e, 0x5, 0x0)
listen(r2, 0x0)
io_uring_enter(r1, 0x3910, 0xaa76, 0x8, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = dup(r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x9}, 0x102114, 0x1, 0x2, 0x9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x20, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bde44a53db7bc61376b5", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1})
r7 = dup(r0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0xfe01, 0x0, 0x8, 0x5, 0x80000001, 0x6, 0xc8}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f0000000340)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="758893459a662ad3f8471b6c89c78173fd77e0fb22eef87cc22677b968e6912f0b44210cc497ea05b36b5e8271c130515e286569edecb08c42c5720314d1ffe7419918d56a60ef3bf5b7eb3e0289543139afc142283058d7e8f89d957585ba60daf5f6001b448af7fac446d6aa434e9b91b50d56de6e33d7325131466b3141", 0x7f}], 0x1, &(0x7f0000000680)=[{0x78, 0x10d, 0x2, "c165142abcd8923b4aafa027e1e55ac3ff9e9a08811c369c3c4b397296a72cc61bfc518b463473e3016b030c6ca2ae61f54eb4eca0b6fd68d714c9897930027afe3981cb98d6936e100029b2b91cc439cdb7362c8b2ce4907c52a8f34b1650d7a60c147dd1c6626e"}], 0x78}, 0xc004)
pipe2$9p(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r8, 0x0, r0, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setgid(0xee00)

1.124349662s ago: executing program 0 (id=1453):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000010100003052bbd70050000000000000000", @ANYRES32=0x0, @ANYBLOB="115102003188000020000000100002800c0004000100000100c2800008000500"/44, @ANYRES32=r2, @ANYRES8=r1], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x100, r3, 0x300, 0x3, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x540f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x48}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x22}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x32}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

1.123308172s ago: executing program 3 (id=1454):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b\b\x00'}}}]}, 0x48}}, 0x0)

1.046716014s ago: executing program 3 (id=1455):
r0 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x1a5, r0, 0x0, 0x0, 0x1, 0x0, 0x1, r0}])

1.046445464s ago: executing program 3 (id=1456):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x200, 0x80100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x1ff}, &(0x7f0000000180))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00')
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x203, 0x7, 0xb}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0}}, 0x20000844)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f0000000100)=0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x511, &(0x7f0000000640)="$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")

1.018499485s ago: executing program 8 (id=1457):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38)
r0 = io_uring_setup(0xf04, &(0x7f00000003c0)={0x0, 0xfb6d, 0x38c1, 0x0, 0xf0})
socket(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70020, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x4040)
unshare(0x40200)
r2 = semget(0x1, 0x4, 0x39c)
semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140), 0x0)
socket(0x840000000002, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
semop(r2, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])
unshare(0x40400)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x6644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r7, 0xfffffffffffffd3a, &(0x7f0000000340)}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)

992.106695ms ago: executing program 3 (id=1458):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x260, 0x138, 0xa, 0x148, 0x0, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
getpid()
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4087, 0xff7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000100)=0x2, 0x6, 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x0)
accept$unix(r2, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x5800)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

906.714178ms ago: executing program 0 (id=1459):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x2000)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

818.68385ms ago: executing program 9 (id=1460):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_unlink(&(0x7f0000000140)='\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
clock_getres(0x7, &(0x7f0000000080))
r6 = dup(r5)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}], 0x1}, 0x20008b88)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}})

414.47622ms ago: executing program 1 (id=1461):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000001c00)={<r1=>0x0, <r2=>0x0})
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
syz_clone(0x20004000, &(0x7f0000000080)="463ecbd0a16e6ca148a5b7d3436a9367e56542f91a216298f58cb7", 0x1b, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="244b42d521a716ec3158a5d821e1c2a59cef0133b8db6a8c8930e97101283b59d306893544")
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$chown(0x4, r4, 0xee01, 0x0)
keyctl$setperm(0x5, r4, 0x2008)
add_key$keyring(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000001800), 0x0, &(0x7f00000018c0)=""/125, 0x7d}, 0xfffffff8}, {{&(0x7f0000001940)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000019c0)=""/121, 0x79}, {&(0x7f0000001a40)}], 0x2, &(0x7f0000001ac0)=""/175, 0xaf}, 0x40}], 0x2, 0x40000000, &(0x7f0000001c40)={r1, r2+10000000})
syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000440)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xc000000}}, {@jqfmt_vfsv0}], [{@permit_directio}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r5, &(0x7f0000001840)=[{&(0x7f0000002880)="d64a4084c3fb97b2527b91a366375d46eab01f92ba26e2a671dfc2413f0e6c8353e4ef36eb31b31d8c0a239785a53d74a25693d00b327086f8ba1348a4191fd4b30a021e0db8834c02d249abdfd78c95868a743da457e221583cbeba12d62dce7193265c4bc594e735b88b4dbec02e6b9f50fa0d62d2a20a34548b2a14f2fd44e60ae1e62ef9f2a08f38dac5633814608955", 0x92}, {&(0x7f00000013c0)="5a0c91718a617b6e53a446aa924e113f0fd7c035cf4da8f849fe3553f73430d287391147cd47808b621d3565dcb90362a1513ba5b2a5", 0x36}, {&(0x7f0000001400)="60fbfef30f7446729f60b5942f7f60eab07d418f2e7dc0e36d6fea1370240fce5798d7945329d450e9180a6a41b59513757404a5db8e562a5c0ed7922270bbc3ab50f0ba3e171e4158d0ac11d1247f8ff43e8a2df0419e36498dd61964e8557b763283dbbee83843c6972f1007bb17fc3ef14b31ea5127ca74af9098cdcd60db396877ae0b190510fa8cb12a05a9af7bd1cdd330a74784576631eb57f991a80831fba71113dfefabae7afc", 0xab}, {&(0x7f00000014c0)="50d26b21e650f3360e1b04ccbed4147f56cfe29793e3f71a31c1f84e34dbd7a36d72c5dfc888efbd475a24284155b941e356078659b6bed82ee7a02d58c680acff8cb2cbc44d86d183f5b5f8b093e6e83fdb5eecd0b039f638aa6fd75f683facb1cc58bdca3c77b56f5938d7318a75d946430c1536e55090f327f742ba35d32bedb9547df9dbc5412f57083835c3e5e4d2874284a046014d442c816ba7a21c342e1cd09fd8841d0980bf95bd336aa800ff24db2271946abe3ae89984170604023852d42d9c00a9980b2ef93cc2868c5deae36e77b46d257511f0ff1d843eb7ab1e661614", 0xe4}, {&(0x7f00000015c0)="a401539476c0be087d6eeca0c364e8d30cec5c48ccaffec7aa55c31b3de948f28316ffaf2262c90d4dac385e95c7520fbcbb1380b418206d3180c99bcf9220e6e107ff64de3d57245b73a1b2a239d752d8ed19eb2d9cecf0bcc70c12686c1313985acc0733fdfbbbfcff14738621d50d794276176ce3d2571fe7a91872", 0x7d}, {&(0x7f0000001640)="ada423fc0243ff6f15676b6d0d3c37e7ae107cebaa619306e42deb89b6a885f690a0cbe72c1208decc75ebefa7742e0b97c969684f067d437047f0bda760594963ee9667261d4d5479df8e18ce92e8f9647c1f1f4b5162ea09ebb0a21db2a0112aa1a8588398882a13d08feaabc2f02a7ee8f44703a6033b22716057731c8ffc7c9f6dffd7afa6af736fcab707cf871d9ce65a24408792e3870c622a2af15529724235ea1ee614e71d26cbf59e19a7302bc7dc96de3269842549ea2aaac7b1a4378630c2114de5edcd0cba32137d9e", 0xcf}, {&(0x7f0000002740)="48a4812b4230d2043261634b002c0ff987d4515e1f1eb6af3b18851484101aa47880db6c305205f74a207ba01f68b45672bacf4ba817e3e92f127dd9c1980dd32c", 0x41}, {&(0x7f0000000200)="ddc50c4a251180ab68dcb700237bcad2601a11fad3021c", 0x17}], 0x8, 0x5, 0x401)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x7)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendfile(r5, r0, 0x0, 0xf03a0005)

66.531478ms ago: executing program 8 (id=1462):
rseq(0x0, 0x0, 0x1000001, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04d, 0x3, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv4_getaddr={0x30, 0x16, 0x20, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x5c, 0xff, r5}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x3}, {0x4, 0x1}}], 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x0, 0x1, 0xfffffffe}, {0x5c, 0xf7}, {0x6, 0x0, 0x6, 0xffff}]})
r6 = socket(0x200000000000011, 0x2, 0x0)
syz_emit_ethernet(0x15b, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x125, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x89}, @ra={0x5, 0x2, 0xe}, @jumbo={0xc2, 0x4, 0x2800000}, @pad1]}], "d313192ac1a819ee7918feadf7bdfc1c2d5c6f9d4247380b4e7c0bd1041ffba72d10f1adbdf73114e548489696384c1ab8b0dd06b91ba1bc5910991649721a8b34797f9ce3185a5a4dc4def56ff8aba72854ea1ff7076878f6ec7c896440128f7df4295e8f9270fe66d614ef18e365447d41b99dd706196db57a167dc53cba538069ceec4c041224c5ead8b25a8d12f271fb278f2cd6e5784836f9ab9bcd9e2cbc8428c250a41ca8dc8d2f7cc1c0e1ff6b1628a570b0c7d45b91d7d1ca92252d3e3492aaa91194844b482d11e3c9b5ec996ed9669f"}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x16)
bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newnexthop={0x2c, 0x68, 0x14, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x14}, [@NHA_ID={0x8, 0x1, 0xffff7b70}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

0s ago: executing program 0 (id=1463):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 11)

kernel console output (not intermixed with test programs):

74861][ T7693] Quota error (device loop1): write_blk: dquota write failed
[  223.008091][ T7725] program syz.0.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.026172][ T7693] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  223.062352][ T7693] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1035: Failed to acquire dquot type 1
[  223.096165][ T7734] vhci_hcd vhci_hcd.2: invalid port number 255
[  223.103811][ T7693] loop1: lost filesystem error report for type 5 error -28
[  223.103990][ T7693] EXT4-fs (loop1): 1 orphan inode deleted
[  223.122333][ T7734] vhci_hcd vhci_hcd.2: invalid port number 255
[  223.132301][ T7734] loop0: detected capacity change from 0 to 128
[  223.142146][ T7693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  223.170142][ T7734] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.210690][ T7734] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.235508][ T7604] veth0_vlan: entered promiscuous mode
[  223.251018][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.261703][ T7604] veth1_vlan: entered promiscuous mode
[  223.281572][ T7604] veth0_macvtap: entered promiscuous mode
[  223.303238][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.304783][ T7734] UDC core: g1: couldn't find an available UDC or it's busy
[  223.375866][ T7749] loop1: detected capacity change from 0 to 1024
[  223.410182][ T7749] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  223.417625][ T7604] veth1_macvtap: entered promiscuous mode
[  223.431571][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.440668][ T7604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.473080][   T28] audit: type=1400 audit(1785030706.219:997): avc:  denied  { write } for  pid=7713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  223.501756][   T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.518635][ T3437] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.538616][ T3437] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.561492][ T7749] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.1047: lblock 2 mapped to illegal pblock 2 (length 1)
[  223.562477][ T3437] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.585650][ T7749] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  223.585795][ T7749] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.1047: lblock 0 mapped to illegal pblock 48 (length 1)
[  223.595251][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  223.595271][    C0] EXT4-fs (loop1): initial error at time 1785030706: ext4_map_blocks:791: inode 3: block 2
[  223.595304][    C0] EXT4-fs (loop1): last error at time 1785030706: ext4_map_blocks:791: inode 3: block 2
[  223.638316][ T7749] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  223.639822][ T7749] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1047: Failed to acquire dquot type 0
[  223.663247][ T7749] loop1: lost filesystem error report for type 5 error -117
[  223.674997][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1045'.
[  223.692855][ T7749] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  223.714326][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17
[  223.725568][ T7749] loop1: lost filesystem error report for type 5 error -117
[  223.725863][ T7749] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.1047: mark_inode_dirty error
[  223.755736][ T7749] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  223.755880][ T7749] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  223.801539][ T7749] EXT4-fs (loop1): 1 orphan inode deleted
[  223.826587][ T7749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.826695][   T68] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  223.826726][   T68] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  223.860922][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1050'.
[  223.880836][   T68] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0
[  223.972795][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20
[  224.055316][ T7791] SELinux:  Context : is not valid (left unmapped).
[  224.240644][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.256026][   T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  224.362387][ T7803] loop9: detected capacity change from 0 to 128
[  224.382208][ T7803] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  224.460526][ T7802] EXT4-fs: Ignoring removed bh option
[  224.530960][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.594268][ T7802] EXT4-fs (loop8): unable to read superblock
[  224.890961][   T12] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  224.915951][   T12] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0
[  225.224381][ T7810] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1058'.
[  225.337440][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  225.350860][ T3295] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  225.388423][ T3295] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  225.422536][ T3295] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  225.724416][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  226.118855][ T7841] loop8: detected capacity change from 0 to 512
[  226.167642][ T7841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.189207][ T7841] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1066: bg 0: block 128: padding at end of block bitmap is not set
[  226.212633][ T7841] EXT4-fs (loop8): Remounting filesystem read-only
[  226.225436][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.294961][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.457020][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'.
[  226.517536][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'.
[  226.534016][ T7857] loop9: detected capacity change from 0 to 512
[  226.605451][ T7857] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  226.621640][ T7857] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1071: bad orphan inode 131083
[  226.632233][ T7857] fserror_report: 3 callbacks suppressed
[  226.632245][ T7857] loop9: lost filesystem error report for type 5 error -117
[  226.645178][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  226.659005][    C0] EXT4-fs (loop9): initial error at time 1785030709: ext4_orphan_get:1425
[  226.667525][    C0] EXT4-fs (loop9): last error at time 1785030709: ext4_orphan_get:1425
[  226.679627][ T7857] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.694805][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  226.694817][   T28] audit: type=1400 audit(1785030709.449:1010): avc:  denied  { write } for  pid=7848 comm="syz.9.1071" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  226.881347][ T7859] loop8: detected capacity change from 0 to 512
[  226.960480][ T7859] EXT4-fs: Ignoring removed bh option
[  227.043895][ T7859] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.108045][ T7851] loop3: detected capacity change from 0 to 1024
[  227.129492][ T7859] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  227.228914][ T7851] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  227.262596][ T7859] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  227.328719][ T7851] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  227.345635][ T7859] EXT4-fs (loop8): orphan cleanup on readonly fs
[  227.386807][ T7859] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4
[  227.416795][ T7851] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  227.447788][ T7859] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota
[  227.497903][ T7864] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  227.514844][ T7859] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1069: Failed to acquire dquot type 1
[  227.562907][   T28] audit: type=1400 audit(1785030710.309:1011): avc:  denied  { mounton } for  pid=7850 comm="syz.3.1070" path="/204/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  227.589855][ T7859] loop8: lost filesystem error report for type 5 error -5
[  227.595299][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  227.608887][    C0] EXT4-fs (loop8): last error at time 1785030710: ext4_acquire_dquot:7041
[  227.628570][ T7859] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1069: Invalid block bitmap block 0 in block_group 0
[  227.692230][ T7859] loop8: lost filesystem error report for type 5 error -117
[  227.694058][ T7859] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1069: Invalid block bitmap block 0 in block_group 0
[  227.788942][   T28] audit: type=1400 audit(1785030710.539:1012): avc:  denied  { shutdown } for  pid=7866 comm="syz.0.1075" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  227.812568][ T7859] loop8: lost filesystem error report for type 5 error -117
[  227.812726][ T7859] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.1069: Invalid block bitmap block 0 in block_group 0
[  227.904291][ T7859] loop8: lost filesystem error report for type 5 error -117
[  227.904539][ T7859] Quota error (device loop8): write_blk: dquota write failed
[  227.997878][ T7859] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  228.012664][ T7879] vhci_hcd vhci_hcd.2: invalid port number 255
[  228.044455][ T7879] vhci_hcd vhci_hcd.2: invalid port number 255
[  228.050948][ T7859] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1069: Failed to acquire dquot type 1
[  228.072689][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.087109][ T7880] loop3: detected capacity change from 0 to 128
[  228.099341][ T7859] loop8: lost filesystem error report for type 5 error -28
[  228.099652][ T7859] Quota error (device loop8): write_blk: dquota write failed
[  228.121103][ T7880] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.154128][ T7859] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  228.170971][ T7880] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  228.181798][ T7859] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.1069: Failed to acquire dquot type 1
[  228.203976][ T7859] loop8: lost filesystem error report for type 5 error -28
[  228.205685][ T7859] EXT4-fs (loop8): 1 orphan inode deleted
[  228.209287][ T7879] UDC core: g1: couldn't find an available UDC or it's busy
[  228.228821][ T7859] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.290056][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.369960][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.385929][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.398685][ T7891] tmpfs: Bad value for 'nr_inodes'
[  228.404646][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1081'.
[  228.414122][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.426805][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.493622][ T7897] netlink: 'syz.1.1082': attribute type 16 has an invalid length.
[  228.502009][ T7897] netlink: 'syz.1.1082': attribute type 17 has an invalid length.
[  228.544650][ T7898] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1082'.
[  228.559733][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.570834][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.623620][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1083'.
[  229.162228][ T7925] syzkaller0: entered promiscuous mode
[  229.169817][ T7925] syzkaller0: entered allmulticast mode
[  229.188938][   T28] audit: type=1400 audit(1785030711.939:1013): avc:  denied  { bind } for  pid=7924 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  229.289547][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1094'.
[  229.331645][ T7934] FAULT_INJECTION: forcing a failure.
[  229.331645][ T7934] name failslab, interval 1, probability 0, space 0, times 0
[  229.344788][ T7934] CPU: 0 UID: 0 PID: 7934 Comm: syz.9.1097 Not tainted syzkaller #0 PREEMPT(lazy) 
[  229.344892][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  229.344905][ T7934] Call Trace:
[  229.344913][ T7934]  <TASK>
[  229.344921][ T7934]  __dump_stack+0x1d/0x30
[  229.344946][ T7934]  dump_stack_lvl+0x95/0xd0
[  229.344966][ T7934]  dump_stack+0x15/0x1b
[  229.344982][ T7934]  should_fail_ex+0x25e/0x270
[  229.345004][ T7934]  ? xfrm_policy_inexact_alloc_bin+0x3b5/0xbf0
[  229.345026][ T7934]  should_failslab+0x8c/0xb0
[  229.345154][ T7934]  __kmalloc_cache_noprof+0x7b/0x3d0
[  229.345177][ T7934]  ? xfrm_policy_inexact_alloc_bin+0x3b5/0xbf0
[  229.345253][ T7934]  xfrm_policy_inexact_alloc_bin+0x3b5/0xbf0
[  229.345282][ T7934]  xfrm_policy_insert+0xdc/0x790
[  229.345436][ T7934]  xfrm_add_policy+0x1a4/0x390
[  229.345459][ T7934]  xfrm_user_rcv_msg+0x4e9/0x970
[  229.345490][ T7934]  ? kmem_cache_free+0xca/0x380
[  229.345523][ T7934]  netlink_rcv_skb+0x11e/0x220
[  229.345612][ T7934]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  229.345643][ T7934]  xfrm_netlink_rcv+0x48/0x60
[  229.345671][ T7934]  netlink_unicast+0x5a7/0x680
[  229.345717][ T7934]  netlink_sendmsg+0x5be/0x6f0
[  229.345745][ T7934]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.345771][ T7934]  ____sys_sendmsg+0x532/0x580
[  229.345838][ T7934]  ___sys_sendmsg+0x195/0x1e0
[  229.345879][ T7934]  __x64_sys_sendmsg+0xd4/0x160
[  229.345913][ T7934]  x64_sys_call+0x194c/0x3020
[  229.345994][ T7934]  do_syscall_64+0x136/0x3c0
[  229.346016][ T7934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.346040][ T7934] RIP: 0033:0x7ff94087de99
[  229.346123][ T7934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.346138][ T7934] RSP: 002b:00007ff93f2d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.346155][ T7934] RAX: ffffffffffffffda RBX: 00007ff940b05fa0 RCX: 00007ff94087de99
[  229.346192][ T7934] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  229.346251][ T7934] RBP: 00007ff93f2d7090 R08: 0000000000000000 R09: 0000000000000000
[  229.346262][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.346272][ T7934] R13: 00007ff940b06038 R14: 00007ff940b05fa0 R15: 00007ffca13c3178
[  229.346290][ T7934]  </TASK>
[  229.653961][ T7940] loop0: detected capacity change from 0 to 512
[  229.687710][ T7940] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1096: corrupted inode contents
[  229.700046][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.701752][ T7940] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.1096: mark_inode_dirty error
[  229.710903][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  229.710925][    C1] EXT4-fs (loop0): initial error at time 1785030712: ext4_do_update_inode:5742: inode 16
[  229.710960][    C1] EXT4-fs (loop0): last error at time 1785030712: ext4_do_update_inode:5742: inode 16
[  229.749011][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.749341][ T7940] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1096: corrupted inode contents
[  229.770790][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.771147][ T7940] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1096: mark_inode_dirty error
[  229.791607][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.792048][ T7940] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1096: corrupted inode contents
[  229.813136][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.816784][ T7940] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  229.834492][ T7940] loop0: lost filesystem error report for type 5 error -117
[  229.834859][ T7940] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1096: corrupted inode contents
[  229.854068][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.854353][ T7940] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.1096: mark_inode_dirty error
[  229.874844][ T7940] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  229.875107][ T7940] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  229.893358][ T7940] loop0: lost filesystem error report for type 5 error -117
[  229.894076][ T7940] EXT4-fs (loop0): 1 truncate cleaned up
[  229.907867][ T7940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.908871][ T3442] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1
[  229.920645][ T7940] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.030121][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'.
[  230.118566][ T7954] FAULT_INJECTION: forcing a failure.
[  230.118566][ T7954] name failslab, interval 1, probability 0, space 0, times 0
[  230.132794][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.1.1103 Not tainted syzkaller #0 PREEMPT(lazy) 
[  230.132823][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  230.132836][ T7954] Call Trace:
[  230.132843][ T7954]  <TASK>
[  230.132851][ T7954]  __dump_stack+0x1d/0x30
[  230.132877][ T7954]  dump_stack_lvl+0x95/0xd0
[  230.132969][ T7954]  dump_stack+0x15/0x1b
[  230.132995][ T7954]  should_fail_ex+0x25e/0x270
[  230.133091][ T7954]  should_failslab+0x8c/0xb0
[  230.133112][ T7954]  __kmalloc_node_track_caller_noprof+0xd5/0x4c0
[  230.133137][ T7954]  ? gadget_dev_desc_UDC_store+0x55/0x1f0
[  230.133182][ T7954]  ? gadget_dev_desc_UDC_store+0x55/0x1f0
[  230.133210][ T7954]  kstrdup+0x3e/0xd0
[  230.133271][ T7954]  gadget_dev_desc_UDC_store+0x55/0x1f0
[  230.133298][ T7954]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  230.133325][ T7954]  configfs_write_iter+0x1cb/0x250
[  230.133401][ T7954]  ? __pfx_configfs_write_iter+0x10/0x10
[  230.133419][ T7954]  vfs_write+0x57d/0x990
[  230.133447][ T7954]  ksys_write+0xdc/0x1a0
[  230.133477][ T7954]  __x64_sys_write+0x40/0x50
[  230.133492][ T7954]  x64_sys_call+0x27e1/0x3020
[  230.133536][ T7954]  do_syscall_64+0x136/0x3c0
[  230.133599][ T7954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.133619][ T7954] RIP: 0033:0x7f86a6bede99
[  230.133704][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.133723][ T7954] RSP: 002b:00007f86a5647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  230.133742][ T7954] RAX: ffffffffffffffda RBX: 00007f86a6e75fa0 RCX: 00007f86a6bede99
[  230.133755][ T7954] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003
[  230.133769][ T7954] RBP: 00007f86a5647090 R08: 0000000000000000 R09: 0000000000000000
[  230.133784][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.133815][ T7954] R13: 00007f86a6e76038 R14: 00007f86a6e75fa0 R15: 00007ffe0e0793b8
[  230.133916][ T7954]  </TASK>
[  230.392625][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.522666][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1107'.
[  230.674797][ T7971] loop0: detected capacity change from 0 to 512
[  230.682465][ T7971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  230.718244][ T7971] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1105: bad orphan inode 131083
[  230.729175][ T7971] loop0: lost filesystem error report for type 5 error -117
[  230.730564][ T7971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.942837][ T7970] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  231.059273][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  231.082567][ T7983] netlink: 'syz.1.1109': attribute type 10 has an invalid length.
[  231.283526][ T7971] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.423747][ T7987] loop8: detected capacity change from 0 to 2048
[  231.448829][ T7987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  231.503193][ T3442] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  231.603508][ T3442] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28
[  231.771709][ T3442] EXT4-fs (loop8): This should not happen!! Data will be lost
[  231.771709][ T3442] 
[  231.782604][ T3442] EXT4-fs (loop8): Total free blocks count 0
[  231.791806][ T7995] xt_ecn: cannot match TCP bits for non-tcp packets
[  231.805906][ T7995] netlink: 'syz.9.1113': attribute type 10 has an invalid length.
[  231.946171][ T3442] EXT4-fs (loop8): Free/Dirty block details
[  231.952275][ T3442] EXT4-fs (loop8): free_blocks=2415919104
[  231.958398][ T3442] EXT4-fs (loop8): dirty_blocks=1088
[  231.963971][ T3442] EXT4-fs (loop8): Block reservation details
[  231.970965][ T3442] EXT4-fs (loop8): i_reserved_data_blocks=68
[  231.983209][ T3442] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 256 with max blocks 822 with error 28
[  232.238461][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  232.331477][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  232.331493][   T28] audit: type=1400 audit(1785030715.079:1016): avc:  denied  { setattr } for  pid=7985 comm="syz.8.1112" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  232.551250][ T8011] loop0: detected capacity change from 0 to 512
[  232.600116][ T8011] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  232.611738][ T8011] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.1120: invalid block
[  232.623748][ T8011] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  232.625244][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  232.641618][    C0] EXT4-fs (loop0): initial error at time 1785030715: ext4_get_branch:178: inode 13: block 1024
[  232.653158][    C0] EXT4-fs (loop0): last error at time 1785030715: ext4_get_branch:178: inode 13: block 1024
[  232.668490][ T8011] EXT4-fs (loop0): 1 truncate cleaned up
[  232.679095][ T8011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.714712][ T8011] netlink: 'syz.0.1120': attribute type 13 has an invalid length.
[  232.723014][ T8011] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1120'.
[  232.734584][ T8011] syz_tun: refused to change device tx_queue_len
[  232.741534][ T8011] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  232.744133][ T8017] vhci_hcd vhci_hcd.2: invalid port number 255
[  232.828383][ T8017] vhci_hcd vhci_hcd.2: invalid port number 255
[  232.841823][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.854671][ T8017] UDC core: g1: couldn't find an available UDC or it's busy
[  233.155286][ T8031] loop0: detected capacity change from 0 to 512
[  233.188956][ T8031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  233.316448][ T8031] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1123: bad orphan inode 131083
[  233.327293][ T8031] loop0: lost filesystem error report for type 5 error -117
[  233.329412][ T8031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.432385][   T28] audit: type=1400 audit(1785030716.109:1017): avc:  denied  { write } for  pid=8022 comm="syz.0.1123" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  234.087311][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'.
[  234.746467][   T28] audit: type=1400 audit(1785030717.499:1018): avc:  denied  { write } for  pid=8063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.818125][   T28] audit: type=1400 audit(1785030717.559:1019): avc:  denied  { write } for  pid=8076 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.865054][ T7992] syz.8.1112 (7992) used greatest stack depth: 8448 bytes left
[  234.976517][ T6997] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  234.989387][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.034912][ T8085] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1141'.
[  235.065096][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'.
[  235.127047][   T28] audit: type=1400 audit(1785030717.879:1020): avc:  denied  { write } for  pid=8088 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  235.189915][   T28] audit: type=1400 audit(1785030717.939:1021): avc:  denied  { write } for  pid=8103 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  235.230426][ T8104] netlink: 'syz.0.1143': attribute type 19 has an invalid length.
[  235.239099][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  235.250165][ T8104] netlink: 'syz.0.1143': attribute type 19 has an invalid length.
[  235.258598][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  235.621453][ T8112] loop3: detected capacity change from 0 to 512
[  235.682205][ T8112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  235.849079][ T8112] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1144: bad orphan inode 131083
[  235.859599][ T8112] loop3: lost filesystem error report for type 5 error -117
[  235.863359][ T8112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.226181][   T28] audit: type=1400 audit(1785030718.639:1022): avc:  denied  { write } for  pid=8105 comm="syz.3.1144" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  236.556775][ T8094] loop8: detected capacity change from 0 to 512
[  237.225253][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1147'.
[  237.244755][ T8094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  237.907406][ T8125] loop1: detected capacity change from 0 to 512
[  238.257359][ T8094] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1140: iget: bad i_size value: 38620345925642
[  238.280696][ T8130] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1149'.
[  238.325180][ T8125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  238.539955][ T8094] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.545208][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  238.561072][    C1] EXT4-fs (loop8): initial error at time 1785030721: ext4_orphan_get:1399: inode 15
[  238.570515][    C1] EXT4-fs (loop8): last error at time 1785030721: ext4_orphan_get:1399: inode 15
[  239.065556][   T28] audit: type=1400 audit(1785030721.799:1023): avc:  denied  { bind } for  pid=8129 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  239.159611][   T28] audit: type=1400 audit(1785030721.849:1024): avc:  denied  { listen } for  pid=8129 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  239.188328][ T8133] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1149'.
[  239.203720][ T8094] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1140: couldn't read orphan inode 15 (err -117)
[  239.213038][   T28] audit: type=1400 audit(1785030721.909:1025): avc:  denied  { write } for  pid=8109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.220409][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.239566][ T8125] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1145: bad orphan inode 131083
[  239.258700][ T8125] loop1: lost filesystem error report for type 5 error -117
[  239.259211][ T8094] loop8: lost filesystem error report for type 5 error -117
[  239.266860][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  239.266951][    C0] EXT4-fs (loop1): initial error at time 1785030722: ext4_orphan_get:1425
[  239.267020][    C0] EXT4-fs (loop1): last error at time 1785030722: ext4_orphan_get:1425
[  239.300199][ T8125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.316976][   T28] audit: type=1400 audit(1785030722.069:1026): avc:  denied  { write } for  pid=8141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.359914][ T8094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.385686][ T8144] loop3: detected capacity change from 0 to 512
[  239.392369][   T28] audit: type=1400 audit(1785030722.099:1027): avc:  denied  { write } for  pid=8116 comm="syz.1.1145" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  239.425130][ T8140] loop9: detected capacity change from 0 to 8192
[  239.433524][ T8140] vfat: Unknown parameter 'ÿ18446744073709551615ä1ëý$tÎèá€@ˆ:êkÙÍúNoÊ
Ù(£D¸Ò‚).Á‚O_‡Þ¿ÃPãR!+ñý‰“ÉŸ7Ó6ŒÏáÅ3ŽOHi¢—"O@ d¢ÄAfžhÃŒ¿ÑsXÕÑ¢@m(Bôc.ýŲ|8º¶m„·Ü9ã˜à´tð6’a˜3sÍu"
%>YÌá ɲ͒íu{$`‡ª9õ¸Z1íyrƒ)¸00000035184372089024Z¸ÌD†è´õõÅèÃ.Ë1@Tàl'
[  239.508455][ T8153] FAULT_INJECTION: forcing a failure.
[  239.508455][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.539981][ T8153] CPU: 1 UID: 0 PID: 8153 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT(lazy) 
[  239.540010][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  239.540023][ T8153] Call Trace:
[  239.540029][ T8153]  <TASK>
[  239.540037][ T8153]  __dump_stack+0x1d/0x30
[  239.540138][ T8153]  dump_stack_lvl+0x95/0xd0
[  239.540159][ T8153]  dump_stack+0x15/0x1b
[  239.540179][ T8153]  should_fail_ex+0x25e/0x270
[  239.540209][ T8153]  should_fail+0xb/0x20
[  239.540292][ T8153]  should_fail_usercopy+0x1a/0x20
[  239.540322][ T8153]  _copy_from_user+0x1c/0xb0
[  239.540343][ T8153]  copy_from_sockptr_offset+0x66/0xa0
[  239.540456][ T8153]  do_ipt_set_ctl+0x675/0x970
[  239.540486][ T8153]  nf_setsockopt+0x199/0x1b0
[  239.540553][ T8153]  ip_setsockopt+0x102/0x110
[  239.540578][ T8153]  udp_setsockopt+0x89/0xa0
[  239.540603][ T8153]  sock_common_setsockopt+0x69/0x80
[  239.540665][ T8153]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  239.540692][ T8153]  __sys_setsockopt+0x184/0x200
[  239.540785][ T8153]  __x64_sys_setsockopt+0x64/0x80
[  239.540812][ T8153]  x64_sys_call+0x2327/0x3020
[  239.540884][ T8153]  do_syscall_64+0x136/0x3c0
[  239.540914][ T8153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.540936][ T8153] RIP: 0033:0x7f308532de99
[  239.540951][ T8153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.541001][ T8153] RSP: 002b:00007f3083d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  239.541021][ T8153] RAX: ffffffffffffffda RBX: 00007f30855b5fa0 RCX: 00007f308532de99
[  239.541033][ T8153] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003
[  239.541045][ T8153] RBP: 00007f3083d87090 R08: 0000000000000300 R09: 0000000000000000
[  239.541056][ T8153] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001
[  239.541143][ T8153] R13: 00007f30855b6038 R14: 00007f30855b5fa0 R15: 00007ffcebd52648
[  239.541162][ T8153]  </TASK>
[  239.588661][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.597578][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.634250][ T8162] vhci_hcd vhci_hcd.2: invalid port number 255
[  239.634274][ T8162] vhci_hcd vhci_hcd.2: invalid port number 255
[  239.646115][ T8162] UDC core: g1: couldn't find an available UDC or it's busy
[  239.692276][   T28] audit: type=1400 audit(1785030722.439:1028): avc:  denied  { write } for  pid=8148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.730546][ T8178] loop3: detected capacity change from 0 to 512
[  239.736614][   T28] audit: type=1400 audit(1785030722.489:1029): avc:  denied  { write } for  pid=8176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  239.781805][ T8178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  239.958902][ T8178] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  239.959482][ T8178] EXT4-fs (loop3): 1 truncate cleaned up
[  239.981209][ T8178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.093412][ T8193] netlink: 'syz.9.1162': attribute type 4 has an invalid length.
[  240.101539][ T8193] netlink: 'syz.9.1162': attribute type 7 has an invalid length.
[  240.109556][ T8193] netlink: 'syz.9.1162': attribute type 8 has an invalid length.
[  240.117605][ T8193] netlink: 'syz.9.1162': attribute type 7 has an invalid length.
[  240.126547][ T8193] netlink: 125384 bytes leftover after parsing attributes in process `syz.9.1162'.
[  240.265425][ T8196] loop8: detected capacity change from 0 to 512
[  240.276447][ T8196] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  240.312428][ T8196] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1161: bad orphan inode 131083
[  240.322887][ T8196] loop8: lost filesystem error report for type 5 error -117
[  240.324282][ T8196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.347226][   T28] audit: type=1400 audit(1785030723.099:1030): avc:  denied  { write } for  pid=8183 comm="syz.8.1161" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  240.598607][   T28] audit: type=1326 audit(1785030723.339:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.1164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308532de99 code=0x7ffc0000
[  240.629134][ T8201] loop0: detected capacity change from 0 to 512
[  240.639722][ T8201] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  240.694363][ T8201] EXT4-fs (loop0): 1 truncate cleaned up
[  240.705366][   T28] audit: type=1326 audit(1785030723.339:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8200 comm="syz.0.1164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308532de99 code=0x7ffc0000
[  240.743812][ T8201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.124937][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.185786][ T8208] usb usb2: usbfs: interface 0 claimed by hub while 'syz.3.1166' sets config #0
[  241.204644][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1165'.
[  241.215332][ T8208] usb usb2: usbfs: interface 0 claimed by hub while 'syz.3.1166' sets config #1
[  241.224982][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1165'.
[  241.303316][ T8213] loop3: detected capacity change from 0 to 2048
[  241.338142][ T8213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.370088][  T360] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  241.385619][  T360] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  241.398786][  T360] EXT4-fs (loop3): This should not happen!! Data will be lost
[  241.398786][  T360] 
[  241.421537][  T360] EXT4-fs (loop3): Total free blocks count 0
[  241.428980][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.440596][  T360] EXT4-fs (loop3): Free/Dirty block details
[  241.447091][  T360] EXT4-fs (loop3): free_blocks=66060288
[  241.466754][  T360] EXT4-fs (loop3): dirty_blocks=16
[  241.473955][ T8217] Invalid logical block size (3)
[  241.482530][  T360] EXT4-fs (loop3): Block reservation details
[  241.502303][  T360] EXT4-fs (loop3): i_reserved_data_blocks=1
[  241.522688][ T3301] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  241.549164][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.645852][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.107311][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1176'.
[  242.609784][ T8265] loop0: detected capacity change from 0 to 512
[  242.788299][ T8265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  242.837012][ T8265] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1181: bad orphan inode 131083
[  242.847537][ T8265] loop0: lost filesystem error report for type 5 error -117
[  242.849304][ T8265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.119701][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1186'.
[  243.615687][ T8282] syzkaller0: entered promiscuous mode
[  243.638544][ T8282] syzkaller0: entered allmulticast mode
[  243.679436][ T8282] FAULT_INJECTION: forcing a failure.
[  243.679436][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.737248][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.1.1190 Not tainted syzkaller #0 PREEMPT(lazy) 
[  243.737278][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  243.737400][ T8282] Call Trace:
[  243.737406][ T8282]  <TASK>
[  243.737413][ T8282]  __dump_stack+0x1d/0x30
[  243.737439][ T8282]  dump_stack_lvl+0x95/0xd0
[  243.737460][ T8282]  dump_stack+0x15/0x1b
[  243.737522][ T8282]  should_fail_ex+0x25e/0x270
[  243.737545][ T8282]  should_fail+0xb/0x20
[  243.737565][ T8282]  should_fail_usercopy+0x1a/0x20
[  243.737650][ T8282]  _copy_from_iter+0xcc/0xe70
[  243.737710][ T8282]  ? skb_set_owner_w+0x19b/0x200
[  243.737744][ T8282]  ? sock_alloc_send_pskb+0x469/0x500
[  243.737884][ T8282]  skb_copy_datagram_from_iter+0xad/0x480
[  243.737981][ T8282]  ? __rcu_read_unlock+0x4e/0x70
[  243.738007][ T8282]  ? skb_put+0xa9/0xf0
[  243.738111][ T8282]  packet_sendmsg+0x255f/0x3210
[  243.738191][ T8282]  ? __rcu_read_unlock+0x4e/0x70
[  243.738216][ T8282]  ? avc_has_perm+0x101/0x190
[  243.738236][ T8282]  ? selinux_socket_sendmsg+0x101/0x410
[  243.738339][ T8282]  ? __pfx_packet_sendmsg+0x10/0x10
[  243.738359][ T8282]  ____sys_sendmsg+0x532/0x580
[  243.738391][ T8282]  ___sys_sendmsg+0x195/0x1e0
[  243.738435][ T8282]  __x64_sys_sendmsg+0xd4/0x160
[  243.738474][ T8282]  x64_sys_call+0x194c/0x3020
[  243.738498][ T8282]  do_syscall_64+0x136/0x3c0
[  243.738520][ T8282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.738543][ T8282] RIP: 0033:0x7f86a6bede99
[  243.738637][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.738656][ T8282] RSP: 002b:00007f86a5647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.738675][ T8282] RAX: ffffffffffffffda RBX: 00007f86a6e75fa0 RCX: 00007f86a6bede99
[  243.738687][ T8282] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  243.738698][ T8282] RBP: 00007f86a5647090 R08: 0000000000000000 R09: 0000000000000000
[  243.738711][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  243.738737][ T8282] R13: 00007f86a6e76038 R14: 00007f86a6e75fa0 R15: 00007ffe0e0793b8
[  243.738758][ T8282]  </TASK>
[  243.960863][ T8296] loop8: detected capacity change from 0 to 1024
[  243.967739][ T8296] ext4: Bad value for 'commit'
[  244.239980][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.284767][ T8303] vhci_hcd vhci_hcd.2: invalid port number 255
[  244.309918][ T8303] vhci_hcd vhci_hcd.2: invalid port number 255
[  244.334104][ T8303] UDC core: g1: couldn't find an available UDC or it's busy
[  244.335405][   T28] kauditd_printk_skb: 401 callbacks suppressed
[  244.335418][   T28] audit: type=1400 audit(1785030727.079:1434): avc:  denied  { write } for  pid=8299 comm="syz.8.1197" name="UDC" dev="configfs" ino=21832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  244.383109][ T8311] netlink: 'syz.0.1201': attribute type 39 has an invalid length.
[  244.397046][   T28] audit: type=1400 audit(1785030727.079:1435): avc:  denied  { open } for  pid=8299 comm="syz.8.1197" path="/41/my_configfs/usb_gadget/g1/UDC" dev="configfs" ino=21832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  244.537670][   T28] audit: type=1400 audit(1785030727.289:1436): avc:  denied  { getopt } for  pid=8314 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  244.700581][   T28] audit: type=1400 audit(1785030727.449:1437): avc:  denied  { shutdown } for  pid=8317 comm="syz.9.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  244.779748][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1205'.
[  245.017988][ T8333] loop3: detected capacity change from 0 to 512
[  245.044472][ T8333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  245.067071][ T8333] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1207: bad orphan inode 131083
[  245.077448][ T8333] loop3: lost filesystem error report for type 5 error -117
[  245.085240][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  245.099082][    C0] EXT4-fs (loop3): initial error at time 1785030727: ext4_orphan_get:1425
[  245.107630][    C0] EXT4-fs (loop3): last error at time 1785030727: ext4_orphan_get:1425
[  245.117165][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.277671][   T28] audit: type=1400 audit(1785030727.889:1438): avc:  denied  { write } for  pid=8326 comm="syz.3.1207" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  246.285886][ T8339] loop0: detected capacity change from 0 to 764
[  246.382793][ T8339] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  246.481992][ T3375] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  246.561199][ T3375] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  246.890674][ T8351] loop0: detected capacity change from 0 to 1024
[  246.981554][ T8351] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  247.120176][ T8351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.135781][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.172200][   T28] audit: type=1400 audit(1785030729.919:1439): avc:  denied  { write } for  pid=8350 comm="syz.0.1214" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  247.250843][ T8359] qrtr: Invalid version 0
[  247.287997][ T8364] syzkaller0: entered promiscuous mode
[  247.303394][ T8364] syzkaller0: entered allmulticast mode
[  247.433872][   T28] audit: type=1400 audit(1785030730.179:1440): avc:  denied  { write } for  pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  247.484000][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.500346][   T28] audit: type=1400 audit(1785030730.209:1441): avc:  denied  { write } for  pid=3299 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  247.658726][   T28] audit: type=1400 audit(1785030730.209:1442): avc:  denied  { write } for  pid=3299 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  247.703325][   T28] audit: type=1400 audit(1785030730.209:1443): avc:  denied  { write } for  pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  247.900267][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'.
[  247.990151][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'.
[  248.162065][ T8394] syzkaller0: entered promiscuous mode
[  248.174934][ T8394] syzkaller0: entered allmulticast mode
[  248.213156][ T8395] loop3: detected capacity change from 0 to 512
[  248.265133][ T8397] loop8: detected capacity change from 0 to 128
[  248.288706][ T8395] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  248.301902][ T8395] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  248.311784][ T8395] System zones: 0-1, 15-15, 18-18, 34-34
[  248.320078][ T8395] EXT4-fs (loop3): orphan cleanup on readonly fs
[  248.327545][ T8397] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  248.349564][ T8395] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  248.404058][ T8395] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  248.414633][ T8397] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  248.465036][ T8395] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1226: bad orphan inode 16
[  248.482588][ T8397] UDC core: g1: couldn't find an available UDC or it's busy
[  248.491031][ T8395] loop3: lost filesystem error report for type 5 error -117
[  248.491766][ T8395] ext4_test_bit(bit=15, block=18) = 1
[  248.499202][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  248.499239][    C0] EXT4-fs (loop3): initial error at time 1785030731: ext4_orphan_get:1425
[  248.499265][    C0] EXT4-fs (loop3): last error at time 1785030731: ext4_orphan_get:1425
[  248.533803][ T8395] is_bad_inode(inode)=0
[  248.538315][ T8395] NEXT_ORPHAN(inode)=0
[  248.557083][ T8395] max_ino=32
[  248.565422][ T8395] i_nlink=2
[  248.574085][ T8395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  248.760575][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.034913][ T8426] loop3: detected capacity change from 0 to 512
[  249.088880][ T8427] netlink: 'syz.0.1240': attribute type 1 has an invalid length.
[  249.135647][ T8426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  249.153267][ T8426] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1238: bad orphan inode 131083
[  249.163773][ T8426] loop3: lost filesystem error report for type 5 error -117
[  249.165165][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  249.178997][    C1] EXT4-fs (loop3): initial error at time 1785030731: ext4_orphan_get:1425
[  249.187639][    C1] EXT4-fs (loop3): last error at time 1785030731: ext4_orphan_get:1425
[  249.215542][ T8426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.360276][ T8427] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1240'.
[  249.535202][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  249.535279][   T28] audit: type=1400 audit(1785030732.269:1454): avc:  denied  { create } for  pid=8425 comm="syz.0.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  250.909979][ T8435] loop9: detected capacity change from 0 to 512
[  251.906046][ T6997] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.930795][ T8435] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  251.983363][ T8435] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1241: bad orphan inode 131083
[  251.993876][ T8435] loop9: lost filesystem error report for type 5 error -117
[  251.995125][ T8435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.070032][   T28] audit: type=1400 audit(1785030734.769:1455): avc:  denied  { write } for  pid=8430 comm="syz.9.1241" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  252.503863][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  252.708307][ T8453] loop0: detected capacity change from 0 to 512
[  252.734176][ T8453] ext4: Bad value for 'max_dir_size_kb'
[  252.777095][   T28] audit: type=1400 audit(1785030735.469:1456): avc:  denied  { getopt } for  pid=8451 comm="syz.8.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  252.853875][   T28] audit: type=1400 audit(1785030735.469:1457): avc:  denied  { ioctl } for  pid=8451 comm="syz.8.1247" path="socket:[23136]" dev="sockfs" ino=23136 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  252.880747][ T8435] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.932730][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.953736][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'.
[  252.965657][ T8463] loop1: detected capacity change from 0 to 128
[  252.983381][ T8463] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  253.020595][ T8467] loop3: detected capacity change from 0 to 1024
[  253.030366][ T8463] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  253.042180][ T8467] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  253.065782][ T3288] udevd[3288]: incorrect ext4 checksum on /dev/loop3
[  253.098952][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'.
[  253.137938][ T8473] loop3: detected capacity change from 0 to 128
[  253.158833][ T8473] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  253.176781][   T68] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  253.226757][ T8473] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  253.250836][ T8473] UDC core: g1: couldn't find an available UDC or it's busy
[  253.340337][   T28] audit: type=1400 audit(1785030737.096:1458): avc:  denied  { read } for  pid=8482 comm="syz.1.1258" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  253.366191][   T28] audit: type=1400 audit(1785030737.096:1459): avc:  denied  { open } for  pid=8482 comm="syz.1.1258" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  253.392542][   T28] audit: type=1400 audit(1785030737.096:1460): avc:  denied  { ioctl } for  pid=8482 comm="syz.1.1258" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  253.699176][ T8490] loop0: detected capacity change from 0 to 256
[  253.791893][ T8490] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  253.880116][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'.
[  253.916891][ T8492] tipc: Started in network mode
[  253.921934][ T8492] tipc: Node identity 0657f91c825e, cluster identity 4711
[  253.929533][ T8492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.944585][ T8492] tipc: Resetting bearer <eth:syzkaller0>
[  253.957371][ T8491] tipc: Disabling bearer <eth:syzkaller0>
[  254.722075][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1265'.
[  254.846659][ T8512] netlink: 'syz.1.1264': attribute type 12 has an invalid length.
[  254.871893][ T8511] loop9: detected capacity change from 0 to 4096
[  254.904546][ T8511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  254.945628][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.003658][   T28] audit: type=1400 audit(1785030738.756:1461): avc:  denied  { write } for  pid=8517 comm="syz.9.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  255.057534][   T28] audit: type=1400 audit(1785030738.756:1462): avc:  denied  { read } for  pid=8517 comm="syz.9.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  255.064749][ T8522] loop9: detected capacity change from 0 to 512
[  255.127901][ T8522] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.141296][ T8522] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.155179][   T28] audit: type=1400 audit(1785030738.906:1463): avc:  denied  { write } for  pid=8517 comm="syz.9.1267" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  255.177327][   T28] audit: type=1400 audit(1785030738.936:1464): avc:  denied  { append } for  pid=8517 comm="syz.9.1267" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  255.200924][   T28] audit: type=1400 audit(1785030738.956:1465): avc:  denied  { ioctl } for  pid=8517 comm="syz.9.1267" path="/39/file1/file1" dev="loop9" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  255.650645][ T8529] FAULT_INJECTION: forcing a failure.
[  255.650645][ T8529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.663779][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.1.1272 Not tainted syzkaller #0 PREEMPT(lazy) 
[  255.663805][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  255.663818][ T8529] Call Trace:
[  255.663826][ T8529]  <TASK>
[  255.663835][ T8529]  __dump_stack+0x1d/0x30
[  255.663923][ T8529]  dump_stack_lvl+0x95/0xd0
[  255.663948][ T8529]  dump_stack+0x15/0x1b
[  255.663968][ T8529]  should_fail_ex+0x25e/0x270
[  255.663996][ T8529]  should_fail+0xb/0x20
[  255.664126][ T8529]  should_fail_usercopy+0x1a/0x20
[  255.664153][ T8529]  _copy_from_user+0x1c/0xb0
[  255.664170][ T8529]  snd_seq_write+0x1cc/0x590
[  255.664216][ T8529]  ? __pfx_snd_seq_write+0x10/0x10
[  255.664304][ T8529]  vfs_write+0x252/0x990
[  255.664399][ T8529]  ? __fget_files+0x184/0x1c0
[  255.664493][ T8529]  ksys_write+0xdc/0x1a0
[  255.664514][ T8529]  __x64_sys_write+0x40/0x50
[  255.664685][ T8529]  x64_sys_call+0x27e1/0x3020
[  255.664705][ T8529]  do_syscall_64+0x136/0x3c0
[  255.664796][ T8529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.664817][ T8529] RIP: 0033:0x7f86a6bede99
[  255.664833][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.664852][ T8529] RSP: 002b:00007f86a5647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.664873][ T8529] RAX: ffffffffffffffda RBX: 00007f86a6e75fa0 RCX: 00007f86a6bede99
[  255.664887][ T8529] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003
[  255.664960][ T8529] RBP: 00007f86a5647090 R08: 0000000000000000 R09: 0000000000000000
[  255.664974][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  255.664985][ T8529] R13: 00007f86a6e76038 R14: 00007f86a6e75fa0 R15: 00007ffe0e0793b8
[  255.665019][ T8529]  </TASK>
[  255.871702][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.106793][ T8554] loop8: detected capacity change from 0 to 512
[  256.144069][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1282'.
[  256.162660][ T8556] ip6gre1: entered promiscuous mode
[  256.168370][ T8556] ip6gre1: entered allmulticast mode
[  256.194662][ T8556] tmpfs: Cannot disable swap on remount
[  256.258026][ T8559] loop9: detected capacity change from 0 to 512
[  256.332019][ T8561] netlink: 'syz.0.1282': attribute type 6 has an invalid length.
[  256.359487][ T8561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1282'.
[  256.547555][ T8554] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  256.558799][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  256.568935][ T8559] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  256.598034][ T8559] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  256.601410][ T8554] EXT4-fs (loop8): 1 truncate cleaned up
[  256.608311][ T8559] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1283: Corrupt directory, running e2fsck is recommended
[  256.627772][ T8559] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  256.636266][ T8559] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1283: corrupted in-inode xattr: invalid ea_ino
[  256.646170][ T8554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.675441][ T8559] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  256.677217][ T8559] EXT4-fs (loop9): Remounting filesystem read-only
[  256.686587][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  256.686605][    C0] EXT4-fs (loop9): initial error at time 1785030740: ext4_iget_extra_inode:5180: inode 15
[  256.686635][    C0] EXT4-fs (loop9): last error at time 1785030740: ext4_iget_extra_inode:5180: inode 15
[  256.721707][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'.
[  256.731226][ T8554] EXT4-fs error (device loop8): __ext4_expand_extra_isize:6455: inode #15: comm syz.8.1281: bad extra_isize 62 (inode size 256)
[  256.745262][   T28] audit: type=1400 audit(1785030740.476:1466): avc:  denied  { write } for  pid=8553 comm="syz.8.1281" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  256.767751][ T8554] EXT4-fs (loop8): Remounting filesystem read-only
[  256.774775][ T8559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.792745][   T28] audit: type=1326 audit(1785030740.546:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.8.1281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248133de99 code=0x7ffc0000
[  256.823383][ T8559] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  256.833223][   T28] audit: type=1326 audit(1785030740.546:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.8.1281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248133de99 code=0x7ffc0000
[  256.852072][ T8559] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  256.861790][   T28] audit: type=1326 audit(1785030740.566:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.8.1281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248133de99 code=0x7ffc0000
[  256.896569][   T28] audit: type=1326 audit(1785030740.566:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.8.1281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248133de99 code=0x7ffc0000
[  256.900697][ T8559] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1283: Corrupt directory, running e2fsck is recommended
[  256.962555][ T8574] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  256.996132][ T8574] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  257.043783][ T8574] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1283: Corrupt directory, running e2fsck is recommended
[  257.116386][ T8559] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  257.142936][ T8559] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  257.154023][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.170881][ T8559] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1283: Corrupt directory, running e2fsck is recommended
[  257.184718][ T8574] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  257.232648][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.516894][ T8595] loop1: detected capacity change from 0 to 256
[  257.806797][ T8598] loop0: detected capacity change from 0 to 128
[  257.852225][ T8595] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  257.875947][ T8598] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  257.919351][ T8598] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  258.049174][ T8598] UDC core: g1: couldn't find an available UDC or it's busy
[  258.097260][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'.
[  258.135969][ T8603] loop9: detected capacity change from 0 to 512
[  258.168587][ T8603] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  258.182044][ T8603] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1295: bad orphan inode 131083
[  258.192715][ T8603] loop9: lost filesystem error report for type 5 error -117
[  258.193553][ T8603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.312186][ T8610] loop8: detected capacity change from 0 to 512
[  258.320843][ T8610] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  258.359316][ T8610] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1296: bad orphan inode 131083
[  258.370009][ T8610] loop8: lost filesystem error report for type 5 error -117
[  258.371149][ T8610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.868751][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.994504][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'.
[  260.081426][ T8610] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.173991][ T8627] netlink: 'syz.8.1302': attribute type 10 has an invalid length.
[  260.184105][   T28] kauditd_printk_skb: 75 callbacks suppressed
[  260.184119][   T28] audit: type=1400 audit(1785030743.926:1546): avc:  denied  { open } for  pid=8620 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  260.208217][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.210333][   T28] audit: type=1400 audit(1785030743.936:1547): avc:  denied  { perfmon } for  pid=8620 comm="syz.3.1299" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  260.216793][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.238265][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1302'.
[  260.255957][   T28] audit: type=1400 audit(1785030743.936:1548): avc:  denied  { kernel } for  pid=8620 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  260.278847][   T28] audit: type=1400 audit(1785030744.016:1549): avc:  denied  { prog_load } for  pid=8624 comm="syz.9.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  260.279545][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.298495][   T28] audit: type=1400 audit(1785030744.036:1550): avc:  denied  { bpf } for  pid=8624 comm="syz.9.1301" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  260.305176][ T8627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.325909][   T28] audit: type=1400 audit(1785030744.036:1551): avc:  denied  { prog_run } for  pid=8624 comm="syz.9.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  260.333089][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.359068][ T8627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.366903][   T28] audit: type=1400 audit(1785030744.106:1552): avc:  denied  { write } for  pid=8624 comm="syz.9.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  260.388139][ T8627] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  260.398348][ T8628] bridge_slave_1: left allmulticast mode
[  260.404153][ T8628] bridge_slave_1: left promiscuous mode
[  260.412985][   T28] audit: type=1400 audit(1785030744.166:1553): avc:  denied  { read write } for  pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  260.459832][   T28] audit: type=1400 audit(1785030744.166:1554): avc:  denied  { open } for  pid=3301 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  260.460135][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.512575][   T28] audit: type=1400 audit(1785030744.166:1555): avc:  denied  { ioctl } for  pid=3301 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  260.547451][ T8628] bridge_slave_0: left allmulticast mode
[  260.556790][ T8628] bridge_slave_0: left promiscuous mode
[  260.572499][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.611860][ T8628] bond0: (slave bridge0): Releasing backup interface
[  260.705757][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1305'.
[  260.734633][ T8637] netlink: 'syz.8.1305': attribute type 12 has an invalid length.
[  260.750106][ T8637] program syz.8.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.792902][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  260.841114][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1308'.
[  260.864244][ T8644] netlink: 'syz.8.1308': attribute type 12 has an invalid length.
[  260.878034][ T8644] program syz.8.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.905448][ T8646] random: crng reseeded on system resumption
[  260.930268][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1310'.
[  261.291066][ T8659] loop0: detected capacity change from 0 to 512
[  261.309137][ T8659] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  261.346408][ T8659] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1312: bad orphan inode 131083
[  261.356995][ T8659] loop0: lost filesystem error report for type 5 error -117
[  261.359046][ T8659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.146404][ T8659] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.177858][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1316'.
[  262.193798][ T8667] Invalid argument reading file caps for ./file0
[  262.202849][ T8667] netlink: 'syz.3.1315': attribute type 28 has an invalid length.
[  262.215209][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'.
[  262.231569][ T8665] netlink: 'syz.8.1316': attribute type 12 has an invalid length.
[  262.290906][ T8665] program syz.8.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.389198][ T8676] loop8: detected capacity change from 0 to 128
[  262.439052][ T8676] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.458235][ T8676] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.490361][ T8676] UDC core: g1: couldn't find an available UDC or it's busy
[  263.017557][ T8683] netlink: 'syz.1.1319': attribute type 4 has an invalid length.
[  263.059185][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'.
[  263.099525][ T8694] loop9: detected capacity change from 0 to 512
[  263.114384][ T8694] EXT4-fs: Ignoring removed oldalloc option
[  263.125505][ T8694] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  263.133667][ T8694] EXT4-fs (loop9): orphan cleanup on readonly fs
[  263.140653][ T8694] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  263.155591][ T8694] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  263.162913][ T8694] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.1323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  263.184603][ T8694] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  263.184962][ T8694] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1323: couldn't read orphan inode 13 (err -117)
[  263.194401][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  263.194430][    C1] EXT4-fs (loop9): last error at time 1785030746: ext4_ext_check_inode:521: inode 13
[  263.222719][ T8694] loop9: lost filesystem error report for type 5 error -117
[  263.234390][ T8699] netlink: 'syz.0.1324': attribute type 19 has an invalid length.
[  263.251130][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  263.264541][ T8699] netlink: 'syz.0.1324': attribute type 19 has an invalid length.
[  263.273491][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  263.331076][ T8694] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.349630][ T8694] FAULT_INJECTION: forcing a failure.
[  263.349630][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.364742][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.9.1323 Not tainted syzkaller #0 PREEMPT(lazy) 
[  263.364785][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  263.364812][ T8694] Call Trace:
[  263.364818][ T8694]  <TASK>
[  263.364825][ T8694]  __dump_stack+0x1d/0x30
[  263.364966][ T8694]  dump_stack_lvl+0x95/0xd0
[  263.364985][ T8694]  dump_stack+0x15/0x1b
[  263.365003][ T8694]  should_fail_ex+0x25e/0x270
[  263.365026][ T8694]  should_fail+0xb/0x20
[  263.365071][ T8694]  should_fail_usercopy+0x1a/0x20
[  263.365096][ T8694]  strncpy_from_user+0x27/0x250
[  263.365116][ T8694]  do_getname+0x59/0x1c0
[  263.365140][ T8694]  __se_sys_renameat2+0x38/0x1c0
[  263.365170][ T8694]  __x64_sys_renameat2+0x67/0x80
[  263.365197][ T8694]  x64_sys_call+0x2a12/0x3020
[  263.365340][ T8694]  do_syscall_64+0x136/0x3c0
[  263.365360][ T8694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.365378][ T8694] RIP: 0033:0x7ff94087de99
[  263.365394][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.365412][ T8694] RSP: 002b:00007ff93f2d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  263.365497][ T8694] RAX: ffffffffffffffda RBX: 00007ff940b05fa0 RCX: 00007ff94087de99
[  263.365512][ T8694] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c
[  263.365527][ T8694] RBP: 00007ff93f2d7090 R08: 0000000000000000 R09: 0000000000000000
[  263.365541][ T8694] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  263.365556][ T8694] R13: 00007ff940b06038 R14: 00007ff940b05fa0 R15: 00007ffca13c3178
[  263.365577][ T8694]  </TASK>
[  263.559883][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.139769][ T8704] loop1: detected capacity change from 0 to 128
[  264.150238][ T8702] loop3: detected capacity change from 0 to 512
[  264.180972][ T8702] EXT4-fs (loop3): fragment/cluster size (4096) != block size (1024)
[  264.446960][ T8711] loop1: detected capacity change from 0 to 256
[  264.872172][ T8711] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  265.102431][ T8716] loop0: detected capacity change from 0 to 2048
[  265.139193][ T8716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.247928][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.381318][   T28] kauditd_printk_skb: 86 callbacks suppressed
[  265.381333][   T28] audit: type=1400 audit(1785030749.136:1642): avc:  denied  { mmap_zero } for  pid=8726 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  265.423763][ T8727] loop0: detected capacity change from 0 to 2048
[  265.439994][ T6997] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.516790][ T8731] loop1: detected capacity change from 0 to 512
[  265.529468][ T8731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  265.542387][ T8727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.617954][ T8731] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1331: bad orphan inode 131083
[  265.628415][ T8731] loop1: lost filesystem error report for type 5 error -117
[  265.629618][ T8731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.714590][ T8736] __nla_validate_parse: 1 callbacks suppressed
[  265.714606][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'.
[  265.799147][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1336'.
[  265.902051][ T8738] netlink: 'syz.9.1336': attribute type 12 has an invalid length.
[  265.996871][ T8738] program syz.9.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.165684][ T8731] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.357968][   T28] audit: type=1400 audit(1785030749.136:1643): avc:  denied  { mount } for  pid=8726 comm="syz.0.1332" name="/" dev="autofs" ino=22390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  266.380437][   T28] audit: type=1400 audit(1785030749.406:1644): avc:  denied  { write } for  pid=8721 comm="syz.1.1331" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  266.402606][   T28] audit: type=1400 audit(1785030749.526:1645): avc:  denied  { write } for  pid=8726 comm="syz.0.1332" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  266.460394][ T8752] loop9: detected capacity change from 0 to 256
[  266.494898][ T8752] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.519757][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1341'.
[  266.621852][   T28] audit: type=1400 audit(1785030749.786:1646): avc:  denied  { name_bind } for  pid=8739 comm="syz.3.1337" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  266.671537][ T8727] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  266.688013][   T28] audit: type=1400 audit(1785030749.786:1647): avc:  denied  { sys_module } for  pid=8739 comm="syz.3.1337" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  266.722045][ T8761] loop8: detected capacity change from 0 to 128
[  266.728623][ T8727] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 3 with error 28
[  266.741881][   T28] audit: type=1400 audit(1785030749.796:1648): avc:  denied  { setopt } for  pid=8739 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  266.765595][ T8727] EXT4-fs (loop0): This should not happen!! Data will be lost
[  266.765595][ T8727] 
[  266.776530][ T8761] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.790217][ T8727] EXT4-fs (loop0): Total free blocks count 0
[  266.796443][   T28] audit: type=1400 audit(1785030749.796:1649): avc:  denied  { ioctl } for  pid=8739 comm="syz.3.1337" path="socket:[22428]" dev="sockfs" ino=22428 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  266.821612][ T8761] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  266.831910][ T8727] EXT4-fs (loop0): Free/Dirty block details
[  266.838120][ T8727] EXT4-fs (loop0): free_blocks=2415919504
[  266.846539][ T8761] UDC core: g1: couldn't find an available UDC or it's busy
[  266.854493][ T8727] EXT4-fs (loop0): dirty_blocks=16
[  266.860352][ T8727] EXT4-fs (loop0): Block reservation details
[  266.869685][   T28] audit: type=1400 audit(1785030749.996:1650): avc:  denied  { create } for  pid=8749 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  266.890104][ T8727] EXT4-fs (loop0): i_reserved_data_blocks=1
[  266.897680][   T28] audit: type=1400 audit(1785030749.996:1651): avc:  denied  { allowed } for  pid=8749 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  267.040935][ T8767] loop9: detected capacity change from 0 to 512
[  267.057356][ T8767] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  267.091164][ T8767] EXT4-fs (loop9): 1 truncate cleaned up
[  267.135186][ T8767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.148697][ T8346] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  267.161797][ T3299] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  267.269380][ T8774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  267.377882][ T8774] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1345: bad orphan inode 131083
[  267.388469][ T8774] loop1: lost filesystem error report for type 5 error -117
[  267.393591][ T8774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.698041][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'.
[  268.018042][ T8780] syzkaller0: entered promiscuous mode
[  268.023562][ T8780] syzkaller0: entered allmulticast mode
[  268.112259][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  268.149486][ T8773] 9p: Bad value for 'rfdno'
[  268.177590][ T8774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.296276][ T8786] set_capacity_and_notify: 1 callbacks suppressed
[  268.296292][ T8786] loop3: detected capacity change from 0 to 512
[  268.309497][ T8786] EXT4-fs: inline encryption not supported
[  268.319471][ T8786] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  268.329826][ T8786] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1350: corrupted in-inode xattr: e_value size too large
[  268.343873][ T8786] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  268.344096][ T8786] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1350: couldn't read orphan inode 15 (err -117)
[  268.353308][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  268.353324][    C1] EXT4-fs (loop3): initial error at time 1785030752: ext4_iget_extra_inode:5180: inode 15
[  268.353348][    C1] EXT4-fs (loop3): last error at time 1785030752: ext4_iget_extra_inode:5180: inode 15
[  268.391738][ T8786] loop3: lost filesystem error report for type 5 error -117
[  268.392339][ T8786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.504386][ T8767] Set syz1 is full, maxelem 65536 reached
[  269.524201][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.705374][ T8797] loop9: detected capacity change from 0 to 256
[  269.739750][ T8797] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.776547][ T6997] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.791734][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1353'.
[  270.093835][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.604718][ T8825] loop8: detected capacity change from 0 to 512
[  270.676912][ T8825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.709851][ T8825] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.741877][ T8832] netlink: 'syz.0.1363': attribute type 19 has an invalid length.
[  270.750330][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'.
[  270.760934][ T8832] netlink: 'syz.0.1363': attribute type 19 has an invalid length.
[  270.771845][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'.
[  272.625224][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  272.625240][   T28] audit: type=1400 audit(1785030756.176:1683): avc:  denied  { create } for  pid=8822 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  272.669841][ T6997] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.078468][   T28] audit: type=1326 audit(1785030756.376:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.340543][ T8839] audit: audit_backlog=65 > audit_backlog_limit=64
[  273.351483][ T8839] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  273.475558][   T28] audit: type=1326 audit(1785030756.376:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.501256][   T28] audit: type=1326 audit(1785030756.376:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.540127][   T28] audit: type=1326 audit(1785030756.376:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.566692][ T8839] audit: backlog limit exceeded
[  273.574010][ T8841] loop0: detected capacity change from 0 to 128
[  273.609865][   T28] audit: type=1326 audit(1785030756.516:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.734147][ T8841] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.767712][ T8841] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  273.794731][   T28] audit: type=1326 audit(1785030756.516:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.3.1358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488596de99 code=0x7ffc0000
[  273.878216][ T8841] UDC core: g1: couldn't find an available UDC or it's busy
[  273.902435][ T8850] loop3: detected capacity change from 0 to 512
[  273.909383][ T8850] EXT4-fs: inline encryption not supported
[  273.917191][ T8850] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  273.927033][ T8850] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1369: corrupted in-inode xattr: e_value size too large
[  273.941075][ T8850] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  273.942357][ T8850] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1369: couldn't read orphan inode 15 (err -117)
[  273.951568][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  273.951590][    C0] EXT4-fs (loop3): initial error at time 1785030757: ext4_iget_extra_inode:5180: inode 15
[  273.951637][    C0] EXT4-fs (loop3): last error at time 1785030757: ext4_iget_extra_inode:5180: inode 15
[  273.989738][ T8850] loop3: lost filesystem error report for type 5 error -117
[  273.991334][ T8850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.775358][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.807589][ T8861] loop9: detected capacity change from 0 to 128
[  275.902473][ T8861] FAT-fs (loop9): bogus number of reserved sectors
[  275.916296][ T8861] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  275.938173][ T8861] FAT-fs (loop9): Can't find a valid FAT filesystem
[  276.018439][ T8866] loop1: detected capacity change from 0 to 1024
[  276.052079][ T8861] loop9: detected capacity change from 0 to 512
[  276.072967][ T8866] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  276.102415][ T8861] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103)
[  276.132939][ T8861] FAT-fs (loop9): Filesystem has been set read-only
[  276.160802][ T8861] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000103)
[  276.179495][ T8866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.320280][ T8876] loop3: detected capacity change from 0 to 1024
[  276.350956][ T8876] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  276.384059][ T8876] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1376: lblock 2 mapped to illegal pblock 2 (length 1)
[  276.431079][ T8876] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  276.431243][ T8876] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.1376: lblock 0 mapped to illegal pblock 48 (length 1)
[  276.440447][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  276.440464][    C0] EXT4-fs (loop3): initial error at time 1785030760: ext4_map_blocks:791: inode 3: block 2
[  276.440501][    C0] EXT4-fs (loop3): last error at time 1785030760: ext4_map_blocks:791: inode 3: block 2
[  276.645770][ T8876] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  276.645942][ T8876] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1376: Failed to acquire dquot type 0
[  276.675115][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.065751][ T8876] loop3: lost filesystem error report for type 5 error -117
[  277.069184][ T8876] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  277.174512][ T8876] loop3: lost filesystem error report for type 5 error -117
[  277.175265][ T8876] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.1376: mark_inode_dirty error
[  277.199180][ T8890] netlink: 'syz.8.1380': attribute type 16 has an invalid length.
[  277.266949][ T8890] netlink: 'syz.8.1380': attribute type 17 has an invalid length.
[  277.279394][ T8876] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  277.279699][ T8876] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  277.334286][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.352680][ T8892] loop0: detected capacity change from 0 to 512
[  277.374865][ T8876] EXT4-fs (loop3): 1 orphan inode deleted
[  277.385225][ T3437] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  277.407706][ T8876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.433003][ T3437] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  277.455412][ T3437] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0
[  277.501127][ T8892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.528876][ T8892] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  277.563518][ T8901] loop9: detected capacity change from 0 to 512
[  277.570463][ T8901] EXT4-fs: inline encryption not supported
[  277.594168][ T8901] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  277.607122][ T8892] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1379'.
[  277.619332][ T8901] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1382: corrupted in-inode xattr: e_value size too large
[  277.625880][ T8892] openvswitch: netlink: Message has 6 unknown bytes.
[  277.633908][ T8901] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  277.640957][ T8901] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1382: couldn't read orphan inode 15 (err -117)
[  277.650758][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  277.650780][    C0] EXT4-fs (loop9): initial error at time 1785030761: ext4_iget_extra_inode:5180: inode 15
[  277.650818][    C0] EXT4-fs (loop9): last error at time 1785030761: ext4_iget_extra_inode:5180: inode 15
[  277.688742][ T8901] loop9: lost filesystem error report for type 5 error -117
[  277.689458][ T8901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.714743][ T8907] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.1379: lblock 23 mapped to illegal pblock 18 (length 1)
[  277.787264][ T8892] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.1379: lblock 23 mapped to illegal pblock 18 (length 1)
[  277.808240][ T8903] loop8: detected capacity change from 0 to 256
[  277.825374][   T28] kauditd_printk_skb: 233 callbacks suppressed
[  277.825463][   T28] audit: type=1400 audit(1785030761.576:1920): avc:  denied  { write } for  pid=8875 comm="syz.3.1376" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  277.856336][ T8892] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 18: comm syz.0.1379: lblock 23 mapped to illegal pblock 18 (length 1)
[  277.874165][ T8909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1384'.
[  277.889639][ T8903] vfat: Unknown parameter './file2'
[  277.900970][   T28] audit: type=1400 audit(1785030761.576:1921): avc:  denied  { create } for  pid=8875 comm="syz.3.1376" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[  277.941380][ T8909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1384'.
[  278.021537][   T28] audit: type=1400 audit(1785030761.586:1922): avc:  denied  { write } for  pid=8875 comm="syz.3.1376" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  278.043792][   T28] audit: type=1400 audit(1785030761.586:1923): avc:  denied  { create } for  pid=8875 comm="syz.3.1376" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  278.654150][ T8906] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  278.708801][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.724838][   T68] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  278.755864][ T8906] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.1379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  278.793342][   T68] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  278.793443][   T68] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  278.839867][ T8906] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.1379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  278.870065][   T68] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0
[  278.899484][ T8917] FAULT_INJECTION: forcing a failure.
[  278.899484][ T8917] name failslab, interval 1, probability 0, space 0, times 0
[  278.923682][   T68] loop3: lost filesystem error report for type 5 error -117
[  278.931012][ T3301] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  278.958351][ T8917] CPU: 0 UID: 0 PID: 8917 Comm: syz.1.1386 Not tainted syzkaller #0 PREEMPT(lazy) 
[  278.958376][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  278.958389][ T8917] Call Trace:
[  278.958395][ T8917]  <TASK>
[  278.958403][ T8917]  __dump_stack+0x1d/0x30
[  278.958428][ T8917]  dump_stack_lvl+0x95/0xd0
[  278.958465][ T8917]  dump_stack+0x15/0x1b
[  278.958627][ T8917]  should_fail_ex+0x25e/0x270
[  278.958650][ T8917]  ? tcf_block_get_ext+0x61e/0xce0
[  278.958687][ T8917]  should_failslab+0x8c/0xb0
[  278.958711][ T8917]  __kmalloc_cache_noprof+0x7b/0x3d0
[  278.958758][ T8917]  ? tcf_block_get_ext+0x61e/0xce0
[  278.958868][ T8917]  tcf_block_get_ext+0x61e/0xce0
[  278.958900][ T8917]  ? __x64_sys_sendmsg+0xd4/0x160
[  278.958926][ T8917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.959017][ T8917]  ? __pfx_prio_init+0x10/0x10
[  278.959040][ T8917]  tcf_block_get+0x67/0xa0
[  278.959070][ T8917]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  278.959174][ T8917]  prio_init+0x36/0x80
[  278.959196][ T8917]  qdisc_create+0x57f/0x9c0
[  278.959224][ T8917]  tc_modify_qdisc+0x102a/0x1550
[  278.959334][ T8917]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  278.959357][ T8917]  rtnetlink_rcv_msg+0x6a7/0x720
[  278.959378][ T8917]  netlink_rcv_skb+0x11e/0x220
[  278.959452][ T8917]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  278.959494][ T8917]  rtnetlink_rcv+0x1c/0x30
[  278.959567][ T8917]  netlink_unicast+0x5a7/0x680
[  278.959589][ T8917]  netlink_sendmsg+0x5be/0x6f0
[  278.959612][ T8917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.959640][ T8917]  ____sys_sendmsg+0x532/0x580
[  278.959668][ T8917]  ___sys_sendmsg+0x195/0x1e0
[  278.959752][ T8917]  __x64_sys_sendmsg+0xd4/0x160
[  278.959829][ T8917]  x64_sys_call+0x194c/0x3020
[  278.959854][ T8917]  do_syscall_64+0x136/0x3c0
[  278.959880][ T8917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.959972][ T8917] RIP: 0033:0x7f86a6bede99
[  278.959989][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.960008][ T8917] RSP: 002b:00007f86a5647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.960030][ T8917] RAX: ffffffffffffffda RBX: 00007f86a6e75fa0 RCX: 00007f86a6bede99
[  278.960044][ T8917] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000004
[  278.960057][ T8917] RBP: 00007f86a5647090 R08: 0000000000000000 R09: 0000000000000000
[  278.960145][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.960156][ T8917] R13: 00007f86a6e76038 R14: 00007f86a6e75fa0 R15: 00007ffe0e0793b8
[  278.960172][ T8917]  </TASK>
[  279.219658][ T3301] loop3: lost filesystem error report for type 5 error -117
[  279.225087][ T3301] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  279.241962][ T3301] loop3: lost filesystem error report for type 5 error -117
[  279.242698][ T3301] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  279.262182][ T3301] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  279.290228][ T8922] FAULT_INJECTION: forcing a failure.
[  279.290228][ T8922] name failslab, interval 1, probability 0, space 0, times 0
[  279.312854][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.1.1388 Not tainted syzkaller #0 PREEMPT(lazy) 
[  279.312921][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  279.312932][ T8922] Call Trace:
[  279.312940][ T8922]  <TASK>
[  279.312962][ T8922]  __dump_stack+0x1d/0x30
[  279.312987][ T8922]  dump_stack_lvl+0x95/0xd0
[  279.313004][ T8922]  dump_stack+0x15/0x1b
[  279.313020][ T8922]  should_fail_ex+0x25e/0x270
[  279.313110][ T8922]  should_failslab+0x8c/0xb0
[  279.313133][ T8922]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  279.313156][ T8922]  ? security_file_alloc+0x32/0xf0
[  279.313184][ T8922]  ? security_file_alloc+0x32/0xf0
[  279.313237][ T8922]  security_file_alloc+0x32/0xf0
[  279.313259][ T8922]  init_file+0x5b/0x1b0
[  279.313286][ T8922]  alloc_empty_file+0x85/0x1e0
[  279.313359][ T8922]  alloc_file_pseudo+0x92/0x120
[  279.313451][ T8922]  anon_inode_getfile+0xa0/0x120
[  279.313521][ T8922]  __se_sys_perf_event_open+0xbf3/0x1250
[  279.313556][ T8922]  __x64_sys_perf_event_open+0x67/0x80
[  279.313594][ T8922]  x64_sys_call+0x2789/0x3020
[  279.313689][ T8922]  do_syscall_64+0x136/0x3c0
[  279.313715][ T8922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.313737][ T8922] RIP: 0033:0x7f86a6bede99
[  279.313752][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.313829][ T8922] RSP: 002b:00007f86a5647028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  279.313846][ T8922] RAX: ffffffffffffffda RBX: 00007f86a6e75fa0 RCX: 00007f86a6bede99
[  279.313925][ T8922] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000000c0
[  279.313937][ T8922] RBP: 00007f86a5647090 R08: 0000000000000000 R09: 0000000000000000
[  279.313948][ T8922] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  279.313962][ T8922] R13: 00007f86a6e76038 R14: 00007f86a6e75fa0 R15: 00007ffe0e0793b8
[  279.314039][ T8922]  </TASK>
[  279.314810][   T28] audit: type=1400 audit(1785030761.616:1924): avc:  denied  { write } for  pid=8891 comm="syz.0.1379" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  279.697443][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.707170][   T28] audit: type=1400 audit(1785030761.826:1925): avc:  denied  { create } for  pid=8908 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  279.727708][   T28] audit: type=1400 audit(1785030762.496:1926): avc:  denied  { write } for  pid=8908 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  280.127354][   T28] audit: type=1400 audit(1785030762.496:1927): avc:  denied  { name_connect } for  pid=8908 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  280.159981][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.225398][   T28] audit: type=1400 audit(1785030762.546:1928): avc:  denied  { listen } for  pid=8908 comm="syz.1.1384" lport=55291 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  280.342170][ T8935] loop0: detected capacity change from 0 to 128
[  280.364543][ T8935] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.673908][ T8935] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  280.860464][ T8941] loop9: detected capacity change from 0 to 512
[  280.869212][ T8941] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  281.002938][ T8941] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1391: bad orphan inode 131083
[  281.013623][ T8941] loop9: lost filesystem error report for type 5 error -117
[  281.015195][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  281.028929][    C1] EXT4-fs (loop9): initial error at time 1785030764: ext4_orphan_get:1425
[  281.037456][    C1] EXT4-fs (loop9): last error at time 1785030764: ext4_orphan_get:1425
[  281.081384][ T8941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.055284][ T8941] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.092619][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1395'.
[  283.254595][ T8976] SELinux: syz.9.1395 (8976) wrote to checkreqprot. This is no longer supported.
[  283.289816][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.302870][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  283.302885][   T28] audit: type=1400 audit(1785030767.056:1938): avc:  denied  { ioctl } for  pid=8968 comm="syz.9.1395" path="socket:[23972]" dev="sockfs" ino=23972 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  283.361541][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1396'.
[  283.373807][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1396'.
[  283.384412][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1396'.
[  283.403775][   T28] audit: type=1400 audit(1785030767.156:1939): avc:  denied  { getopt } for  pid=8979 comm="syz.8.1396" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  283.642212][ T8983] loop1: detected capacity change from 0 to 512
[  283.649114][ T8983] ext2: Unknown parameter 'noacl'
[  283.698625][ T8989] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1398'.
[  283.800812][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.818355][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.863904][ T3437] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.872946][ T3437] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.888326][ T3437] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.902419][ T3437] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.933354][ T3437] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.938991][   T28] audit: type=1400 audit(1785030767.696:1940): avc:  denied  { watch } for  pid=8997 comm="syz.1.1403" path="/307" dev="tmpfs" ino=1685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  283.949229][ T3437] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.988328][ T3437] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.008889][ T3437] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.021947][   T28] audit: type=1400 audit(1785030767.726:1941): avc:  denied  { shutdown } for  pid=8996 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  284.034780][ T9003] loop3: detected capacity change from 0 to 1024
[  284.070064][   T28] audit: type=1400 audit(1785030767.736:1942): avc:  denied  { ioctl } for  pid=8996 comm="syz.3.1402" path="socket:[23996]" dev="sockfs" ino=23996 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  284.072915][ T9003] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  284.116746][ T8998] loop1: detected capacity change from 0 to 512
[  284.127739][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  284.131812][ T8998] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  284.157820][ T8998] EXT4-fs (loop1): 1 truncate cleaned up
[  284.168412][ T8998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.201958][ T9003] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1404: lblock 2 mapped to illegal pblock 2 (length 1)
[  284.218336][ T9003] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  284.218448][ T9003] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  284.227797][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  284.227815][    C0] EXT4-fs (loop3): initial error at time 1785030767: ext4_map_blocks:791: inode 3: block 2
[  284.227852][    C0] EXT4-fs (loop3): last error at time 1785030767: ext4_map_blocks:791: inode 3: block 2
[  284.262549][ T9003] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.1404: lblock 0 mapped to illegal pblock 48 (length 1)
[  284.299640][ T9003] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  284.522884][ T9003] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  284.643411][ T9003] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1404: Failed to acquire dquot type 0
[  284.694553][ T9003] loop3: lost filesystem error report for type 5 error -117
[  284.810611][ T9003] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  284.843125][ T9003] loop3: lost filesystem error report for type 5 error -117
[  284.863201][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.864599][ T9003] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.1404: mark_inode_dirty error
[  284.897060][ T9003] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  284.901117][ T9003] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  284.936415][ T9003] EXT4-fs (loop3): 1 orphan inode deleted
[  285.295738][ T9003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.332281][ T9023] netlink: 'syz.1.1409': attribute type 15 has an invalid length.
[  285.340294][   T28] audit: type=1400 audit(1785030769.086:1943): avc:  denied  { watch watch_reads } for  pid=9022 comm="syz.1.1409" path="/308/file1" dev="tmpfs" ino=1697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  285.370456][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1409'.
[  285.443129][   T28] audit: type=1400 audit(1785030769.196:1944): avc:  denied  { write } for  pid=9002 comm="syz.3.1404" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  285.507819][   T28] audit: type=1400 audit(1785030769.226:1945): avc:  denied  { write } for  pid=9002 comm="syz.3.1404" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  285.871493][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.915342][   T68] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  285.945292][ T9026] loop9: detected capacity change from 0 to 512
[  285.962465][   T68] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  285.962579][   T68] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0
[  286.115478][ T9026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.150203][ T9026] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1411: bg 0: block 128: padding at end of block bitmap is not set
[  286.307010][ T9033] loop1: detected capacity change from 0 to 128
[  286.335238][   T68] loop3: lost filesystem error report for type 5 error -117
[  286.441044][ T9033] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  286.464731][ T3301] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0
[  286.480072][ T3301] loop3: lost filesystem error report for type 5 error -117
[  286.480252][ T3301] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  286.538693][ T3301] loop3: lost filesystem error report for type 5 error -117
[  286.539681][ T3301] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error
[  286.558955][ T9026] EXT4-fs (loop9): Remounting filesystem read-only
[  286.634006][ T7604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.696271][ T3301] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  286.718989][ T9039] loop8: detected capacity change from 0 to 128
[  286.813274][ T9039] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.844468][ T9039] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.888150][ T9039] UDC core: g1: couldn't find an available UDC or it's busy
[  287.876367][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1419'.
[  287.958262][ T9054] netlink: 'syz.3.1419': attribute type 12 has an invalid length.
[  288.030231][ T9054] program syz.3.1419 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.474592][ T9067] loop9: detected capacity change from 0 to 512
[  288.505113][ T9067] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  288.645317][ T9067] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1421: bad orphan inode 131083
[  288.655927][ T9067] loop9: lost filesystem error report for type 5 error -117
[  288.675150][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  288.688928][    C1] EXT4-fs (loop9): initial error at time 1785030772: ext4_orphan_get:1425
[  288.697812][    C1] EXT4-fs (loop9): last error at time 1785030772: ext4_orphan_get:1425
[  288.737596][ T9067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.257258][ T9073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1425'.
[  290.293103][ T9074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1424'.
[  290.339941][ T9073] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1425'.
[  290.350145][ T6997] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  290.432006][ T9073] netlink: 'syz.3.1425': attribute type 5 has an invalid length.
[  290.500008][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1426'.
[  290.526964][ T9073] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1425'.
[  290.588980][ T9077] netlink: 'syz.8.1426': attribute type 12 has an invalid length.
[  290.603284][ T9067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.645237][ T9077] program syz.8.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  290.690086][ T9083] netlink: 'syz.1.1428': attribute type 10 has an invalid length.
[  290.708726][ T9085] netlink: 'syz.3.1429': attribute type 10 has an invalid length.
[  290.810763][ T9089] loop3: detected capacity change from 0 to 512
[  290.841670][ T9089] EXT4-fs: Ignoring removed bh option
[  290.870738][ T9091] ALSA: seq fatal error: cannot create timer (-19)
[  290.884982][ T9089] EXT4-fs: Ignoring removed mblk_io_submit option
[  290.887703][ T9094] loop8: detected capacity change from 0 to 256
[  291.007616][ T9091] loop1: detected capacity change from 0 to 256
[  291.021014][ T9089] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  291.040808][ T9091] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.058237][ T9096] loop8: detected capacity change from 0 to 256
[  291.071953][ T9089] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  291.100856][ T9096] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.122906][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  291.122923][   T28] audit: type=1400 audit(1785030774.876:1949): avc:  denied  { remount } for  pid=9090 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  291.150461][ T9089] EXT4-fs (loop3): orphan cleanup on readonly fs
[  291.180683][ T9089] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4
[  291.241741][ T9089] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  291.251663][ T9089] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1431: Failed to acquire dquot type 1
[  291.288475][ T9089] loop3: lost filesystem error report for type 5 error -5
[  291.288719][ T9089] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1431: Invalid block bitmap block 0 in block_group 0
[  291.295992][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  291.296013][    C0] EXT4-fs (loop3): last error at time 1785030775: ext4_acquire_dquot:7041
[  291.341460][ T9089] loop3: lost filesystem error report for type 5 error -117
[  291.341628][ T9089] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1431: Invalid block bitmap block 0 in block_group 0
[  291.362700][ T9089] loop3: lost filesystem error report for type 5 error -117
[  291.368420][ T9089] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1431: Invalid block bitmap block 0 in block_group 0
[  291.390312][ T9089] loop3: lost filesystem error report for type 5 error -117
[  291.390528][ T9089] Quota error (device loop3): write_blk: dquota write failed
[  291.458064][ T9089] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  291.490782][ T9089] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1431: Failed to acquire dquot type 1
[  291.545703][ T9104] loop0: detected capacity change from 0 to 128
[  291.575218][ T9104] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.609344][ T9100] FAT-fs (loop8): error, invalid FAT chain (i_pos 196, last_block 8200)
[  291.638133][ T9089] loop3: lost filesystem error report for type 5 error -28
[  291.638864][ T9089] Quota error (device loop3): write_blk: dquota write failed
[  291.713807][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1437'.
[  291.727557][ T9104] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.759923][ T9089] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  291.775891][ T9100] FAT-fs (loop8): Filesystem has been set read-only
[  291.797474][ T9104] UDC core: g1: couldn't find an available UDC or it's busy
[  291.819643][ T9089] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1431: Failed to acquire dquot type 1
[  291.896789][ T9089] loop3: lost filesystem error report for type 5 error -28
[  291.897857][ T9089] EXT4-fs (loop3): 1 orphan inode deleted
[  292.099480][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'.
[  292.133826][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1440'.
[  292.164058][   T28] audit: type=1400 audit(1785030775.916:1950): avc:  denied  { ioctl } for  pid=9119 comm="syz.8.1442" path="socket:[24304]" dev="sockfs" ino=24304 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  292.418227][ T9089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  292.461574][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.928203][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1448'.
[  292.943256][ T9130] loop1: detected capacity change from 0 to 512
[  292.972571][ T9130] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  293.035968][ T9130] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1445: bad orphan inode 131083
[  293.046534][ T9130] loop1: lost filesystem error report for type 5 error -117
[  293.049450][ T9130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.216093][   T28] audit: type=1400 audit(1785030776.836:1951): avc:  denied  { write } for  pid=9125 comm="syz.1.1445" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  293.554299][   T28] audit: type=1400 audit(1785030777.166:1952): avc:  denied  { read } for  pid=9136 comm="syz.9.1449" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  293.598664][ T9141] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1451'.
[  293.905951][ T9141] loop3: detected capacity change from 0 to 512
[  293.930407][ T9141] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  293.939572][ T9141] EXT4-fs (loop3): couldn't read superblock of external journal
[  294.369342][ T9130] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.658922][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  294.743758][ T9157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9157 comm=syz.0.1453
[  294.758796][ T9160] loop3: detected capacity change from 0 to 512
[  294.765522][ T9160] EXT4-fs: inline encryption not supported
[  294.771824][ T9160] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  294.783688][ T9160] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1458: corrupted in-inode xattr: e_value size too large
[  294.797980][ T9160] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  294.798279][ T9160] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1458: couldn't read orphan inode 15 (err -117)
[  294.807439][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  294.807461][    C1] EXT4-fs (loop3): initial error at time 1785030778: ext4_iget_extra_inode:5180: inode 15
[  294.807489][    C1] EXT4-fs (loop3): last error at time 1785030778: ext4_iget_extra_inode:5180: inode 15
[  294.845813][ T9160] loop3: lost filesystem error report for type 5 error -117
[  294.846616][ T9160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.049130][ T9173] netlink: 'syz.9.1460': attribute type 19 has an invalid length.
[  295.087269][ T9173] netlink: 'syz.9.1460': attribute type 19 has an invalid length.
[  295.106452][   T39] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.133072][   T39] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.160076][   T39] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.185245][   T39] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.476847][ T9178] loop1: detected capacity change from 0 to 512
[  295.543197][ T9178] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  296.741220][   T39] ==================================================================
[  296.749561][   T39] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios
[  296.757900][   T39] 
[  296.760222][   T39] write to 0xffff888119e874e0 of 44 bytes by task 9181 on cpu 1:
[  296.767953][   T39]  tty_set_termios+0xc0/0x900
[  296.772634][   T39]  set_termios+0x373/0x4f0
[  296.777067][   T39]  tty_mode_ioctl+0x37f/0x5b0
[  296.781759][   T39]  n_tty_ioctl_helper+0x87/0x370
[  296.786707][   T39]  n_tty_ioctl+0x101/0x200
[  296.791134][   T39]  tty_ioctl+0x83e/0xb80
[  296.795378][   T39]  __se_sys_ioctl+0xce/0x140
[  296.799958][   T39]  __x64_sys_ioctl+0x43/0x50
[  296.804543][   T39]  x64_sys_call+0x1563/0x3020
[  296.809305][   T39]  do_syscall_64+0x136/0x3c0
[  296.813885][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.819773][   T39] 
[  296.822090][   T39] read to 0xffff888119e874fa of 1 bytes by task 39 on cpu 0:
[  296.829484][   T39]  n_tty_lookahead_flow_ctrl+0x1b0/0x2d0
[  296.835112][   T39]  tty_port_default_lookahead_buf+0x91/0xc0
[  296.841025][   T39]  flush_to_ldisc+0x279/0x330
[  296.845692][   T39]  process_scheduled_works+0x4d4/0x9a0
[  296.851231][   T39]  worker_thread+0x569/0x750
[  296.855813][   T39]  kthread+0x221/0x270
[  296.859891][   T39]  ret_from_fork+0x146/0x330
[  296.864474][   T39]  ret_from_fork_asm+0x1a/0x30
[  296.869226][   T39] 
[  296.871533][   T39] value changed: 0x47 -> 0x81
[  296.876194][   T39] 
[  296.878501][   T39] Reported by Kernel Concurrency Sanitizer on:
[  296.884637][   T39] CPU: 0 UID: 0 PID: 39 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(lazy) 
[  296.893904][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  296.904042][   T39] Workqueue: events_unbound flush_to_ldisc
[  296.909856][   T39] ==================================================================
[  296.976170][ T9187] FAULT_INJECTION: forcing a failure.
[  296.976170][ T9187] name failslab, interval 1, probability 0, space 0, times 0
[  296.989009][ T9187] CPU: 1 UID: 0 PID: 9187 Comm: syz.0.1463 Not tainted syzkaller #0 PREEMPT(lazy) 
[  296.989034][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  296.989102][ T9187] Call Trace:
[  296.989108][ T9187]  <TASK>
[  296.989116][ T9187]  __dump_stack+0x1d/0x30
[  296.989202][ T9187]  dump_stack_lvl+0x95/0xd0
[  296.989222][ T9187]  dump_stack+0x15/0x1b
[  296.989251][ T9187]  should_fail_ex+0x25e/0x270
[  296.989279][ T9187]  should_failslab+0x8c/0xb0
[  296.989358][ T9187]  kmem_cache_alloc_bulk_noprof+0x65/0x400
[  296.989387][ T9187]  ? bpf_test_run_xdp_live+0x698/0x1330
[  296.989414][ T9187]  bpf_test_run_xdp_live+0xee8/0x1330
[  296.989516][ T9187]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  296.989550][ T9187]  ? bpf_test_run_xdp_live+0x434/0x1330
[  296.989583][ T9187]  bpf_prog_test_run_xdp+0x559/0x9e0
[  296.989605][ T9187]  ? __rcu_read_unlock+0x4e/0x70
[  296.989708][ T9187]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  296.989733][ T9187]  bpf_prog_test_run+0x208/0x340
[  296.989813][ T9187]  __sys_bpf+0x8da/0xc30
[  296.989851][ T9187]  __x64_sys_bpf+0x69/0x80
[  296.989883][ T9187]  x64_sys_call+0x10cb/0x3020
[  296.989902][ T9187]  do_syscall_64+0x136/0x3c0
[  296.989922][ T9187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.990020][ T9187] RIP: 0033:0x7f308532de99
[  296.990040][ T9187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.990058][ T9187] RSP: 002b:00007f3083d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  296.990077][ T9187] RAX: ffffffffffffffda RBX: 00007f30855b5fa0 RCX: 00007f308532de99
[  296.990114][ T9187] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  296.990126][ T9187] RBP: 00007f3083d87090 R08: 0000000000000000 R09: 0000000000000000
[  296.990136][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  296.990210][ T9187] R13: 00007f30855b6038 R14: 00007f30855b5fa0 R15: 00007ffcebd52648
[  296.990226][ T9187]  </TASK>
[  297.927972][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.